{"report_id":"371b8903-1c4e-4d42-afce-ad76437b6feb","version":6,"status":"done","tags":[],"date":"2026-05-12T12:51:20Z","url":{"schema":"http","addr":"m.galabetl075.com","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"104.21.39.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"m.galabetl075.com/tr/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"title":"Galabet Güvenilir Casino\u0026Bahis Sitesi","dom":{"size":3748,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (609)","md5":"12a65d9b7c23d8e2b78f31d04a0fc015","sha1":"e55d405fcef318699b1566e01dd585cbc5f4ff2d","sha256":"75626270954044c0aee4a00ddff5d0afb0fe13fcda3fa969e907aa431967d613","sha512":"c8f0943ac1f89f2349ba4299939d9ba63715221dbb863aab091f9b6130005bcddb8b398a6abb4821ad72cca2609f8dcebdaeb35303e176836b842e7a4c7eda22","ssdeep":"","tlshash":"737174258ab20426036b50ad3ba7f31f723ad1033649e54879ad53405f45fa8c8b37de","dom_hash":"domhash9d04913952afd4564baa478ba5fdebdc","first_seen":"2026-05-12T12:51:50.928045Z","last_seen":"2026-05-12T12:51:50.928045Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.galabetl075.com","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"104.21.39.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-16T12:51:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"events.eu1.segmentapis.com","ip":{"addr":"54.72.127.119","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2018-07-31","domain_rank":186340,"first_seen":"2021-08-11T00:43:45Z","last_seen":"2026-05-10T11:56:42.498343Z","alert_count":0,"request_count":1,"received_data":262,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"eu-swarm-newm.galabet1074.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1246,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"rgs-wss.galabet1074.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1120,"sent_data":787,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2026-05-06T18:34:40.342222Z","alert_count":0,"request_count":2,"received_data":2114,"sent_data":1055,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"m.galabetl075.com","ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":483,"request_count":161,"received_data":8686129,"sent_data":85762,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"crm-lib.fasttrack-solutions.com","ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-28","domain_rank":1905587,"first_seen":"2019-02-04T20:13:24Z","last_seen":"2026-05-05T03:24:04.887488Z","alert_count":0,"request_count":5,"received_data":2952921,"sent_data":2430,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"icons.galabet1074.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":55,"received_data":8224189,"sent_data":35022,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-05-10T23:28:03.250326Z","alert_count":0,"request_count":2,"received_data":129286,"sent_data":901,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2026-05-11T15:06:33.160609Z","alert_count":0,"request_count":15,"received_data":1067162,"sent_data":7204,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"secure.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":8212,"first_seen":"2012-08-20T19:27:12Z","last_seen":"2026-05-11T18:38:24.064557Z","alert_count":0,"request_count":1,"received_data":2002,"sent_data":716,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2026-05-12T05:20:23.641415Z","alert_count":0,"request_count":4,"received_data":24813,"sent_data":2555,"comment":"","tags":null,"fingerprints":null},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-05-10T02:17:01.526758Z","alert_count":0,"request_count":8,"received_data":466250,"sent_data":5090,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"accounts.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":44666,"first_seen":"2017-07-31T05:50:56Z","last_seen":"2026-05-11T15:38:27.732155Z","alert_count":0,"request_count":1,"received_data":1797,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dataspot-int-bucket.galabet1074.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":256633,"sent_data":1334,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2026-02-04T12:39:13.107167Z","last_seen":"2026-04-29T00:34:24.413927Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1182,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cms.galabet1074.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":5,"received_data":29982,"sent_data":3450,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":2,"received_data":5296,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-10T22:41:13.190184Z","alert_count":0,"request_count":2,"received_data":123490,"sent_data":904,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dataspot-bucket.galabet1074.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":102948,"sent_data":1298,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"galabet.winwingames.io","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2026-01-16T16:03:38.346691Z","last_seen":"2026-04-29T00:34:22.993011Z","alert_count":0,"request_count":5,"received_data":58213,"sent_data":2349,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"geoapi.30btcoservice.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-04-21T12:24:34.195611Z","last_seen":"2026-04-30T19:32:17.119119Z","alert_count":0,"request_count":2,"received_data":2372,"sent_data":942,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dataspot-wss.galabet1074.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1217,"sent_data":834,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-05-10T22:48:37.877978Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dataspot-internal-wss.galabet1074.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1224,"sent_data":831,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"statistics.galabet1074.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":30,"received_data":69739,"sent_data":20267,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"go-cms.galabet1074.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":12,"received_data":65830,"sent_data":6814,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"216.58.201.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-10T22:25:41.533246Z","alert_count":0,"request_count":4,"received_data":1852053,"sent_data":1833,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.segment.com","ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1998-07-06","domain_rank":9348,"first_seen":"2014-04-11T12:30:48Z","last_seen":"2026-05-07T02:10:07.338396Z","alert_count":0,"request_count":2,"received_data":111162,"sent_data":961,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19615298\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fm.galabetl075.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__2myio38s3fq","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0ef693eced60275aec3e8e7e39701dc","sha1":"8956f6e7af032e7d88e4b51de7ca966b4f85e599","sha256":"7899506fedebdf3926dab7f751aac7ec697ee87ac45b29a6c3878438c548a3fb","sha512":"57a39afed35b36dedc27711959eb34df71d265d1ce8889452839584fe9507ce8c4be93c617b79e09aebed869876b8739757427bea43238932cc1c84915285bda","ssdeep":"","tlshash":"e7e0683ba30195b185c1e2e8b44569066a790762a014746d63291211e70ea8ef326517","size":380,"data":"","first_seen":"2026-05-12T12:51:51.106303Z","last_seen":"2026-05-12T12:51:51.106303Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.B8U2wfjY.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ebfccd5b0556b7f3700937c434234f92","sha1":"f1949fecd9d3b9954310b0d5bd5beb75282a71dd","sha256":"6d43875cade9d2b3a81eef3f3ddecac90ea8bc3ee21691a4da98e70df41fc13d","sha512":"e1d6a3a833081daf449c93907ce27802e37c8e19f26baab07e756094a8f7d75958429038f5f7f20ab28731fc777a54fb96c5b08c719390f78225996e5b53c77c","ssdeep":"3072:vWCPJAo1gbchIp5p+P8fiCkC8xMQbiHBmq2/j6/j1JK1rbaf7B9RBg:eYVgoq+8fiCkC8xMQbiHBmq7JK1rbafU","tlshash":"67d35b943282f57087f39097a87f530bf2b92d58b409d930e4b8f4e975e4146e1a3fa9","size":135409,"data":"","first_seen":"2026-05-05T13:06:27.407961Z","last_seen":"2026-05-27T10:53:40.830938Z","times_seen":1896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/tr/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c4cac0dc8078b77132c245a6417310c","sha1":"de3f4fe204506ade467fdeb939ca0d4f752e32f8","sha256":"20061c1a4845420710952d5b4e60cc455d7cd3ab65d8fd05ae9a2d59f517fba3","sha512":"275869bf480889e3d04efa35c68bf651a62e490d8d85798d64124e5d977dd3cbf586987cc0023b65454dc0630d4558ad5963322fcba59149b45c12f797320791","ssdeep":"","tlshash":"23e0a31d1c2eb42117b419dce337855930d6130225451695c787d8543970cc968c6e4c","size":422,"data":"","first_seen":"2026-04-21T19:21:58.237449Z","last_seen":"2026-07-06T22:32:47.106903Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11d8c522ce416d1e4ebf987b38ad86cc","sha1":"2076ea5f76ddaa838f865c5feb43b8e59892a73f","sha256":"037f25cb78631d1b2e1caa9ce32d4e42d02c1f21f7ee64eaa0a9d08e9a721b4e","sha512":"f02c4644416bea737ff0c29653865f69fa542f5e8db71d11bb799635b99e7f0c071e7fdeffaf081789113e8ea352b4846c0231ab079f299bef64e04cec1277d9","ssdeep":"96:0LAUdiKXVjaIm2AF75BT5XlvuArAxvlzp3fpJQdadatZKlnaxG56lTO9a7DF/IyU:SAcRljalnF/T5VvrEtP3B6adatslKGsA","tlshash":"c4c1ec8e79d7702551a3723b8baf9045723ad1131848d960b88ce6a07f20d2c97f7bcd","size":5869,"data":"","first_seen":"2026-05-12T12:51:51.262432Z","last_seen":"2026-05-12T17:10:48.752252Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-B89tW-rE.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d8737e5bf55aa6a8c17fcf533dfb5d25","sha1":"858f882e4d881cdd16c127cde97f6a16d543a495","sha256":"1eea5c2f11d6c5223465074ca6ad2a8eda28f238e7798f99b895a73df1f21c2c","sha512":"d0f6897d3f18689e774de61646af49ce28d5631f3c4522588c0148e761d6a2a80863ab0297b26f0f18e0d9309300b3204008ab34485d1ede4cb0608cf1993e5b","ssdeep":"384:9Mci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJd:9Mci408FFnJrIjE3D/OY2E0xqpc1NKkC","tlshash":"0b8209d0e2b4f7a642e96acd80392074f2218c28347dd0f1b6b6edda70664ca956dd37","size":18029,"data":"","first_seen":"2026-04-30T19:32:29.771105Z","last_seen":"2026-05-14T23:49:57.370064Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/emptyWinner-BYOhvUKK.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6efb2e372d5a13e64629f80c57f5826c","sha1":"b84143adf54d4386728e648149f989c0e25800d4","sha256":"2dce6eba35c5f219b3f3c7beb37f5032b435206e8cfc18a3386e27a8ce497374","sha512":"cdf4615cbf0231fe4b77f8637b739071a8340b9e234fbe5e9f24f42e3f6dd281c4d1585e0c68241045204c7f4cf0f40690086418368311b9c5a1d693c4fb80e9","ssdeep":"","tlshash":"8531658fd5458a38b3674c9591d9e680cf142697ee34fae083e40e9ac5a5109c64c74d","size":1788,"data":"","first_seen":"2026-04-30T19:32:29.781449Z","last_seen":"2026-05-14T23:49:57.494198Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/RunningLine-D8CK8pTY.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"051be86df563ede1d9b91f31b051189c","sha1":"5c86b79f8073b46282b39979eccd91ad87c76368","sha256":"a655ba06b8ae1af66260af28e440311c4bc59fcc746c0966d702a80ac83d0abf","sha512":"5c9f5c6648cce9b9ff82f4f0d59f33eee62bac2a25140ae0410e8b519410d83f06ef121d9a4411c923906c00ef6b0a26c0d5062c91d00b8ddbc4881efbfa9c4b","ssdeep":"","tlshash":"571102569011b5fccaab06c2b13e040c295701a5fe274da0e07e18552a29180bf37fb8","size":995,"data":"","first_seen":"2026-04-30T19:32:29.751652Z","last_seen":"2026-05-14T23:49:57.478899Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","size":60965,"data":"","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-08-10T15:32:58.760263Z","times_seen":457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=bc48296","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dbbe1a7d40a4a855e0411c1a19652de","sha1":"c5af0f3dee6aacfb1b2cf8ad41c734f8039bb3a0","sha256":"7370b77a09553209c1fba44947bd713c2f8d842a282e296200398c4dd4c7afb6","sha512":"dc2ff9d25cc20706eb4719c0fdebc53267e7649d8a0d42b76d6a6eb96c4f0ff08b604fd2aff94db12a629bc08ba6507bb8a34cec6dd59bb42dbc5e002ce921ff","ssdeep":"768:HPZ1UbN3aQe+roEuPT38WwK6PhWv0Kh4y6QewkNzy2mh+slc38kCVoO4kB:vZObNKQe+UJPwHQe81h+slcCVo2B","tlshash":"1e73b78db1d2bae94df32021535b3604f23b1974542bd484f7acedd52928b0be227b6d","size":75126,"data":"","first_seen":"2026-04-17T00:47:10.101067Z","last_seen":"2026-05-18T20:41:30.756579Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/LiveChatAdviser-rT6Ygk8F.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"208aebdcf641f40656c79bda07555119","sha1":"25a44147189c2758e7b4d7124ceb2467cfbbe73c","sha256":"e19f201c0460845af755650687bf735ef7199f31390abd5407d4f775c73691ce","sha512":"05840875ed903788e2a5d971a57c9daed5c6df7abbc4e0d7b9f377158879adaaafa1cb103ce0daf27162f9ef42f66f3e96cfac78ab6e178c87a573318ba2661d","ssdeep":"","tlshash":"6b1123d5f0c6a3fd6667244cd75a604320064fb4c13d1db5407b15645a6ce0aa34eed4","size":863,"data":"","first_seen":"2026-04-30T19:32:29.726808Z","last_seen":"2026-05-14T23:49:57.37238Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/InternalDataspotTracking-DK8fDMbr.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd08975446a190db000d5d79ba28ae42","sha1":"fa2ab04876e1c5eef7e0d4bc32308de889d7081e","sha256":"8645f139380371358e71312a5e6d91a01419166e2af17ae5213e536a23a3513c","sha512":"2901dafdae97a1cbb92c8aab581f7e62ead2f0112f4415ad627dae314a55195ebe45ad1dc751c588f2ea49ae39578f64964d009cf5b8b5a625494599e9617ff3","ssdeep":"96:SBZUCVtfJREr2Cv7CvXvqvxGr9qCtz2T7TGgZQ1bZmn41+pnys9OtmksEZRtifh4:SBZUCVt7ErNvuvXvqvxGZpFCHVkdy4wU","tlshash":"35a1741fc83c04747051c5dd587796abc2bc7c999180c8f0a02b9e6a621be09d7f6ea7","size":4866,"data":"","first_seen":"2026-04-30T19:32:29.755311Z","last_seen":"2026-05-14T23:49:57.382329Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galabet1074.com/core.js","fqdn":"dataspot-int-bucket.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1a23321d0a7b81fc124eb474f519164","sha1":"7302a4790a11a55a39af27b5c5d95391f36c7449","sha256":"ce157be72b0feb99d83e0ecb45dee49f9e8f69330da84cf33d65c8a80c297a63","sha512":"d6277696b3f9808906a75fa273e27c5777028965b625be99a466119e25cba96e635598bfa686bcfc065bb901db6dbeb2262b56012d65014d784bebc2382b5815","ssdeep":"6144:D1Osubz6j/kbklCp/5Kbb09tg8KSFO6JxC:BkbklCpxKbbCtg8KSFq","tlshash":"8e34944567f11c2752f6b0f94b0bc1d6722ac003251a9c8878ad73b85fcea7896f5bb4","size":252431,"data":"","first_seen":"2026-03-09T20:13:42.687398Z","last_seen":"2026-08-09T00:47:56.549072Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.C9lBcIW0.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"54553990828699ae5da505cd84a7c555","sha1":"7fb756c0707893645717d5941f39b2efd8b0698b","sha256":"35fd889ec1d958bf5fd633f4dddf2b474ac46c5d5a820a3f9314fba91cc7cb19","sha512":"f0623c882d54352793fcfdf1866ce9c91e1770ac490d2aaada4722c12a5b81ab0659c2143182893e45c017da5d36d0433178a7461024f7a2fbe5857f71d18198","ssdeep":"6144:f338OEQ4KFjvqBOtt+ODfiYn/EoSU7kIS9uRIEer1F9gzBAFi/OiMwjLwUcxr12U:PNGeDKOtt+ODfB/EoSKkIS9uR7er1F9F","tlshash":"56544ce4b352ba3cd7e7c2d690ba2609f33c3d59b42a5764f1ad9c0d3395448833ab64","size":304115,"data":"","first_seen":"2026-05-12T12:09:28.883981Z","last_seen":"2026-05-13T08:36:34.825436Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-C7fm_l4S.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"015f13f26cbd87b457e4ec6b937fa51d","sha1":"5c6191881f2972f8e8091e52dc22eb55a34b8588","sha256":"2913ac802b9271a39853964416349a15e9de6e618fe9d56f09aa471fde406c9c","sha512":"036b2422abbf2e6f1b0191550bf61e4163ad8472b5ee153cdbc8bcfcea65654f55a6bdd99bde39c3fafad7ce54de57c6d5c9dda202e74f0322dc2c5bbb339b8c","ssdeep":"6144:cfeB97084RG8o2O4YLIALoh6wjYSd51jXVvFaNIacDGRD6Oq:cmb7084RG8o2O4YM/jYe5daNIARO/","tlshash":"db240ac4b274b0a556e594d4502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","size":221193,"data":"","first_seen":"2026-04-30T19:32:29.746144Z","last_seen":"2026-05-14T23:49:57.379599Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galabet1074.com/configs/928de3c284a560a4ec2990544700741b.js","fqdn":"dataspot-int-bucket.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"introduction_type":"scriptElement","is_inline":false,"md5":"827d18e4ff621e93271b60634ab6c3df","sha1":"c84e0d7c38c5d9833aeec6d934d662e464028396","sha256":"64e2883bc2e63fd152ac0c71a10ee560ad2f14ad166ba108c8f8a767dd2e8c0c","sha512":"2e0e8d451a3906ca6d32b725297f36dc35b7bc2baa974bfe6797b93bca26e1714bcfbd29a81a7677fec58e63c85a1acfc7378d1ec410752ad2e031742c043c7b","ssdeep":"","tlshash":"d55179a27c511e77007d5435a0569cc0b425ab8b2a36dc5c3bce351c0f7ebaa51b5f8d","size":2633,"data":"","first_seen":"2026-04-29T00:34:34.779593Z","last_seen":"2026-07-06T22:32:46.539489Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/tr/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"932d1c008400401a55681904391c206c","sha1":"7cc9f4d6461805e1878406a830a785ed08d9adbb","sha256":"24cbc4e4b2c15b32036fbb84d653cb480e0818fda8318d2a806d8c3e8666dcdc","sha512":"06be73e2b9709f0164075b7fe30d5f2c03288af4d97b5eac9c0d77cd04b238efe0bf6dd746c6c9063b2f2edd00fa981d58769f76a1439687e7b0582a4d78167c","ssdeep":"","tlshash":"b421d6e238630473061625f7a93fb188b479341e2e0dd821c04fd9a839a9fdf81a3a08","size":1405,"data":"","first_seen":"2026-02-24T14:23:51.476805Z","last_seen":"2026-07-06T22:32:47.10213Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/firebase-messaging-sw.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7726d28a1fb7d022808d139d825a5f6d","sha1":"fd02b1ebf730b59a36ecbd4c04a403f15a44bbde","sha256":"768cc283ea5534f36611004306c3ad6a98a049fdd416a216daa304041e73fa9b","sha512":"a3107c2a5cfff5017290a5f6d9888f628d7389d3e5b561afac5ec26bcf704edf46ccd74418c2299bc6216f0e939b5a97b8e46cae62d70c0be2f2e258c820562f","ssdeep":"","tlshash":"3221fb134be2f8232e3001c37b9a3218ae2a0e3903b0e0df70bb56b0271556b205bfc5","size":1153,"data":"","first_seen":"2026-04-30T19:32:29.88642Z","last_seen":"2026-05-14T23:49:57.350968Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026version=71.0.1.3.4.20.1.1.1.1.1.3.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcc6351807fde62425120232a49e703f","sha1":"573cf2f3cf201d0d1b503a52da9da4ee6d34119c","sha256":"807c669e2445492c7b07fc0ca4d9a317164ba780935d85e627e9110adb5f0ea9","sha512":"d0d5b29cb79df31aba52a896b2fe3da459529d766f88da943bcce28f1eca3f3978c468cd1107d4b376914ab91eb2ac63668929d0b6888e13716af89d3529c939","ssdeep":"96:qhUsXhUAvhUwhUMqdpsTJV3ac/t017gWrZJPJwJtJcN7QcGIKTe3PJvCLq:qGsXGAvGwGRdemgSZPTQ1IK6xK2","tlshash":"aac13325834fc87b7367925a62cbb70f3018517da0f9183be474ca70b18a1c7d206daa","size":5942,"data":"","first_seen":"2026-04-30T19:32:29.877367Z","last_seen":"2026-05-22T17:22:58.319047Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FacebookTracking-DC8cwDZP.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c89003002629a25a4ecefc681009a509","sha1":"ed04a148d338d35f5ae876b5d32d7adb480d277a","sha256":"decf3982610b7183ed6bf5e76823dbc0a10511d0660d674fb87e989d9e4735a0","sha512":"413e57983ccf4f6a10ef0dfbc3277b0c000a8aabc17bf41bb321c71bcf8f026f3f64d0c4ed9ff0149329a21ae8b708e1cc55fc5916364f068e8b1b257f41b87c","ssdeep":"","tlshash":"ee01fe0f2c85b47d167c18a8d3bbd81425ba590e2a8b54a5c6c7cdb9367458a40ceb8d","size":681,"data":"","first_seen":"2026-04-30T19:32:29.825307Z","last_seen":"2026-05-14T23:49:57.41558Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FeaturedGames-CW2_S--l.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52f38a5e3b565c06662013c33693799f","sha1":"c67d070675a1f7246603573fe68c2988160a9cff","sha256":"782315ec21d9805b6885c5a27237564d32e43ab2574a2b0bb7a09b366ce03b15","sha512":"d89cbbd2c46eeb4a5922a91585b24bf1e03c0c6e2db05d6aab144b5a2e900d5d146f4304375c7e279ab844e3cee94abef33d5b500a5099ffb5b7abb458bb21e1","ssdeep":"192:RE/TM3f6HEEUD+Z9y7NaoihCWOJLwL4BflgayjP1:i7MyHE2ZA7NaDh6gaCt","tlshash":"e9f1e90ae010ba7de57b45eb757e6108f87a0ad0e7190890d07e6d2919e9246733ef8b","size":7903,"data":"","first_seen":"2026-04-30T19:32:29.941784Z","last_seen":"2026-05-14T23:49:57.397964Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/tr/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25968e8050b03a228b4d547826b098c6","sha1":"b15ac3dce03be69ab8e198afebaf9cf761cf9da4","sha256":"583e20359cfc6a64154b601fc47309be1e57fc2b89434d8a7649445fc66af0fd","sha512":"d2256261787b021c3ef34b69e3509640f04abd03353b7dbea1d8f07211764770e8b0a4a1ea015475e3c326d1fc797d8191b87834550309076754f8b1213dcab0","ssdeep":"","tlshash":"89e0f1e77817486a749f01bd6bb5902431832119640dc922fcfdd4241f60693cc0e88c","size":435,"data":"","first_seen":"2025-12-24T22:39:16.413128Z","last_seen":"2026-07-06T22:32:47.109477Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/lodash-CcEN8nAa.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"52b187e263b833b9513f79f203644c0b","sha1":"75a03851a894e668e1f0b63d76c07a507d40fb88","sha256":"bc5d16a9abd16480d8b5dd2b6ce42ebdb7225a84d8a7a066f9e4190bd8bb9456","sha512":"bd37aa00b2b593be9cafea4269930d35ac3e1bb529cdee7f15a4aeecc6e76d80b9f84a319af2c2332f8b66b35ad8d2547b308a03e3a0476b71d330be327bc6fc","ssdeep":"3072:d/srcwn2yy41XoZhd76onMeMhc8Uyxu0GM7:d/srr2nZX/Aayx0y","tlshash":"a7f390c835d7f4a283a7287440bf084ff23dad65a84cc550e1aae0dd7db89198277e6d","size":165266,"data":"","first_seen":"2026-04-30T19:32:29.801198Z","last_seen":"2026-05-14T23:49:57.41118Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/12.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","size":300,"data":"","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-08-12T20:39:19.640436Z","times_seen":29143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.D0_AT6ht.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"568c7a055403e155db43586c00b9682d","sha1":"56c1c0c89894221e749b4b2bac5e3f3901ea2b4f","sha256":"de8fd99ad2663b1c2dea7508d911ee627403191d7d20a8e70f8b4372f5e73c2d","sha512":"63e6854af00c532dd7482938ece0b27c1b61bc6e4c91ddde9185d22fd7fba06c8b7a19c17e3002c1c96aa06da94a9b5dc6e6df008adc4dff48ffb0de7dbbcb4b","ssdeep":"1536:GXrqgq37RvTh1mmHPW//sQE8QOe10qS3+wX0t:gENbh9O/TQH10LNs","tlshash":"3e434bdef181743167e715f2a07f9002b73a2a2c385c81b0f629dd9925da04ba277f6d","size":55782,"data":"","first_seen":"2026-05-12T12:09:28.963999Z","last_seen":"2026-05-13T08:36:34.835554Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/WagmiConf-DUgl5XWp.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"092631219e2d2e194b760880b5ee7d3a","sha1":"c203f1803a691c9e1db008c19533fb251c81ff9f","sha256":"7ed67fc2edf74742c2e49ab46f69cf68bcf89d0d7c5394b4489173287b9eb532","sha512":"3fb526a15666e937099975aba759417e06718bab1c6a2800779a29283c430904cf1caf0f2b0f64ea332439f3449384d45ef14b1eb4dd2f285ece49754a2bce64","ssdeep":"1536:a2Caz/SCdwD7ZajZlO7jMMDWOx6uxPU6nUhVxSuS7XUF3waGBfGYBAEytq2bPVAc:bCaSlx5xPUaU+mEy1bPuv1K/XGk","tlshash":"c8a34ad07196b46103a74ae008bf440bf139ac34200e566cf269ecde79b96e99277f7d","size":100999,"data":"","first_seen":"2026-04-30T19:32:29.794827Z","last_seen":"2026-05-14T23:49:57.369116Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/SystemBetCalculatorContainer-gFRshID3.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"629601d82eaace15b01af40f48be406d","sha1":"136b5202e75a7a7b33a12e5b5c88f20ab58952e7","sha256":"91e8e66f4b6bef20214a9c81d459c66c05c015c9a1c506feefd9e005ededeed4","sha512":"8821dc48ba33c4d88df4754c209d861d49485a98a4f356c6d47432d4893a4b1b92c667408d504671a702c6c6546c30dc39ab052dc42052ed0678b936b8f0d477","ssdeep":"","tlshash":"ec11c0139754ce74c48a1ea20585a0500db1061c5a18f568b6f58c3cf0290d383ebfbb","size":890,"data":"","first_seen":"2026-04-30T19:32:29.948573Z","last_seen":"2026-05-14T23:49:57.380567Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/GoogleTagManagerTracking-DZhctjBO.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9ed68d341df84dc333867860592c7bd","sha1":"8d63b948bc8f948e11a6b3830bc574591c1ad756","sha256":"32658a08b026183b6b6f8a0258c12a7cbe735372fda058bf0af2bcd53295bac3","sha512":"5926e946eef0649e707db5a9752541656915c6a73dac8be19defdfb51eafd187322daa782739d257bb3b94ed7de100d7ca607ae4c9d638e55ca186834a8151e0","ssdeep":"384:B30HgCB901PDVPAZ9e5mze5giWVyoxJUJF+FOndK3pqyuQNJg1F0TQOmhNwizwTO:d0AaqtAZ9eo6SiWVyov8MFOndKqyuQNC","tlshash":"00a2bac7f9a548a0b5bd1fe81fc2528635b1b65af49144707c9e7c0c223cc4ef2b5aa9","size":21780,"data":"","first_seen":"2026-04-30T19:32:29.854425Z","last_seen":"2026-05-14T23:49:57.363459Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/GoogleAnalyticsTracking-yBQHUQgc.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"727649e3cebbce9c49b593d32d6d0a7b","sha1":"449526ee932242cc315722b3bedb98e7d33b0e69","sha256":"1a1fa5462932c03a4b5ba35fd23c54fa63c0edc214f3eadf57da0cec261d75c6","sha512":"997b1830d52e6d24e336cd1f551ef4d26b5aa4cbf62c3486af37abe827032d05400e8761791fdda0233c5eb48ab3212dfe8279411103b2c37dafdce21144140b","ssdeep":"192:mWYceR0SE+m/C8b3bHXC876hoxGE0VK7D6L7kBNrnPWh52Lz2PM7mBz:bYcoE/CEC9EP3Byy2PdBz","tlshash":"bf52b55c32adb0b682df6054587f720bf1755910a458f480a265edf46ef8caf026bf36","size":13707,"data":"","first_seen":"2026-04-30T19:32:29.949542Z","last_seen":"2026-05-14T23:49:57.414707Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.xhyEK0_l.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c96a39460d2b0a92409b2b92f3da88f9","sha1":"c1ad7e3c7f38743ebadf589676726dad6799a9d5","sha256":"af2012b0cdfa449f186df2f8dc9b3e64b48b8c5c630cc8d3c4df61973499e7c4","sha512":"c6a642b4f09c7dc0b2679c972cc99e4c1e00e268d309aae062883d3eeeb7d3e39bef53388dd20aae7f733da57ed2374c1b12ded0997cbca2762b4b03c332cbfd","ssdeep":"","tlshash":"27a022ca38ca32ae020230300f0f20c0e0b8c02c030e0328800a0200b2300a002ffc3c","size":74,"data":"","first_seen":"2024-06-24T12:34:03Z","last_seen":"2026-08-11T15:10:11.980508Z","times_seen":18486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a3e94e19b384b80fd4132b3735bfc8f","sha1":"ec1475a09eda97a5622d7c5bc2d650c86314eb2b","sha256":"5c5fdf18e27f2ac8aa2ffbef0573c2280601802831df99d50ad86c51b57ef402","sha512":"84eefe0c0c2ac4755fbda71d622b0ee74447b5c1ffd35e740c1710d27b110167b2692ded7c311d5b8bef5360d24ad5f03382580eede0d9b6a58ef239b71fff2f","ssdeep":"192:/XKuPlMK5EbbbCWuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8n1xDt4atx5Ye4ymr//A","tlshash":"9ee10e5c39f394610a93351f033be115f3b6e533221eec41b9dc8968af54667caa7d88","size":6791,"data":"","first_seen":"2026-04-17T00:47:10.117791Z","last_seen":"2026-05-18T20:41:30.876213Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-D196OAK0.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79e14a887ebaf995aece24de6d9a6375","sha1":"8aa8ebca8a6cea888e01a0a636137d19c10fbe2f","sha256":"79e6f732c62e0067b45c23e42e0665810efc219857d3675ecb4889bcd367b495","sha512":"69facf495e6f8755ee70e88dfd4cd59dea2f00f0a756406a3150f68851d295f13baf72be09134b97e78b153c80f085322c03aadac85872eeb9fafcecbbd7fbdd","ssdeep":"","tlshash":"3a5142c7a042d6b8bfe708e6429b10b070374d5cfe1f44d092be58964998792e35bf4d","size":2924,"data":"","first_seen":"2026-04-30T19:32:29.874468Z","last_seen":"2026-05-14T23:49:57.361312Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/PromotedProductsWidget-BmBBmXho.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9f8074e3a11cfd1c273f1b563199dc5","sha1":"6076d56c138570583511c7d77e131c36e35d85f3","sha256":"a259e43e1bb8a25a400220ec4f08441a32da2569a1666ebc27f57bd5f5902e21","sha512":"e6634febe1e2a8907f916fe4757b2c103b6c30c63ba387041fb9be3923e412bc632c20a426d80912815c67f077b21d1a9af6c7d6c3a89a9a1208c168878e1626","ssdeep":"","tlshash":"2c4169c3d934a279f23e5cec114550c838257d18d96558b150b77c1a913d816bb57ffc","size":2121,"data":"","first_seen":"2026-04-30T19:32:29.921789Z","last_seen":"2026-05-14T23:49:57.407266Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/NotificationsButton-CRcMibFE.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"edecb46fb8c55da0a7522275eb1bb505","sha1":"299580befcfbde53484f33749d4da069d1365518","sha256":"a82ad2ef453a02afe40e25c07582d9ad7b90bf979f71d63136e0f0d037402212","sha512":"fbb3336004e0b299a6c288300bee290f1e2496f821743eaf3e8a27055a6a80b9e00c8f28b96b96bc07eccf35b10a9c68e49a16fa537aec038ca421e1bab319a1","ssdeep":"","tlshash":"8bf0208be998d9f41b820910b32bd015383ab83cef4a688000ea2c58233005a895f94f","size":559,"data":"","first_seen":"2026-04-30T19:32:29.731645Z","last_seen":"2026-05-14T23:49:57.388904Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galabet1074.com/core.js","fqdn":"dataspot-bucket.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"introduction_type":"scriptElement","is_inline":false,"md5":"048c1b8465da207ecf31bd8fc2a01c46","sha1":"17a7c7bb7432d7be77188f6bed0e42dff033e540","sha256":"bdd193789c9a7d8c3f4159b796da5229406884e4c2aa269bdf58a7e8ce4f2882","sha512":"1a4ed5eaabb66424d864c5719aa546f8186eb62d7f9e8470f2ce57c7c2680e89d02be11560d1f5de4669d61de39ba3a0f8b1c8fe16817c18f389299d3f4ee194","ssdeep":"1536:3p7FZqZWm6P+GgMwnm0mO2xiDvhIbq/Z3qDPA/nh:5qZYSmS2evhIY33/h","tlshash":"44a35dc5b2a164f083939bd1d4710253e32c6865390280dcf7bcded66f299cab166fb8","size":99905,"data":"","first_seen":"2026-03-28T16:05:39.610024Z","last_seen":"2026-08-10T15:32:58.79564Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/walletConnect-CiycSUBb.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8b7c6c60fe7ada749160139c01cca4fe","sha1":"a6aa718e73afe4c831661d7c86cb4a8cf5f3078b","sha256":"0d26e1e1ecd21a2605a661c09f9a3b86fafdaf555c547fe108ef69e8a0257d12","sha512":"08a9dee9da29e1d216a8eda3c167c2ffddde30a9730a36b5bd9abca8aa96271bff6014bedf26efcdb1fd7e921e72b4ddd80a1042555f050e48a0a9fd12536c42","ssdeep":"","tlshash":"7d4153ed9a14e5fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","size":1999,"data":"","first_seen":"2026-04-30T19:32:29.837535Z","last_seen":"2026-05-14T23:49:57.324846Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/userJWE-pM_Mqpsg.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"501b70cc98d6582f6ae0940f4a6eb51d","sha1":"32f51eccc56adffed968cec4c0568752278df6d8","sha256":"90322e1022e6e8339782be885cfdd6e8c38b995c2e9c33e3610c59301351e982","sha512":"ed1eee1b87da5696c41f127f2997600c4b8e86fc1f9864a0c1a4322eb732ef186bf8aea19ad4dcc1fe69d7bbd65a2d9d4cef5fb9f65c23fed35cb2e0ef7ba683","ssdeep":"","tlshash":"4bc022eb0cc411bb85582c401049ec128220392862e8d3415b08d3aaba6600bb20ca14","size":194,"data":"","first_seen":"2026-04-30T19:32:29.88265Z","last_seen":"2026-05-14T23:49:57.461024Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/useOpenLiveChat-CypT5USk.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"27380365e4a578b11a7919521758e963","sha1":"3bfe048899862ee5bb0f4b66dd6a417e9d7c54d0","sha256":"85806610d74d2079726ace5bb5c8a44759e5c9f5fd4c6c040e41f96cbcbd04c3","sha512":"cb4d44bd5c744ed19044690fdf2df0d90d0c5db417ad79bf326a57ed12337db88b81df667bb76f506a0b5605506b362609bcb2688020ccb97e69b473e1511b6a","ssdeep":"","tlshash":"6ff0e1de86989e7c80c09ec1515ff4f45b3816a4740dc441a43e3cdd642480586bfc6b","size":584,"data":"","first_seen":"2026-04-30T19:32:29.842561Z","last_seen":"2026-05-14T23:49:57.437801Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/Tooltip-BHyVkt4V.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a749318be9752205b42d1b9189971a4e","sha1":"721feb3d960e535deb8eb5d92e04936e43013e0e","sha256":"c86970db4ff5ada2157e03be42523520634dfc56551de0df48c1819969d39e6d","sha512":"04ffa6d71b78e62a3f0fe07aa75e2942e549264346196633635fc7b7607c8cd7a6740c50b8e62116533866856814e51e2f5cf0529d25cabdaa51ae7640f90c93","ssdeep":"","tlshash":"3701f656e032fbf4e17754d6142d956d7153366c7e2f58f06038058f0ae4984d317b8a","size":821,"data":"","first_seen":"2026-04-30T19:32:29.743301Z","last_seen":"2026-05-14T23:49:57.348232Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cebc7667967e601f02df39ba19712d86","sha1":"c7d3677008d76115cc41ba1b734aad112c743dbf","sha256":"089867e58a1de5998b0d74b779119d8a30fe54616ea3ce76063a5530163febea","sha512":"80a26888852e4a15ef49580494958b710628b404f4026c5b218daa918280b24a8f2fcc698ac49ee66c6e9b91954c54f5f296abfd4645d71cc32c83d4ba199378","ssdeep":"","tlshash":"2b01c07d5b86312454f634906b2bbb4a743b12be5c535808848d0414a3a8bafa21add8","size":697,"data":"","first_seen":"2025-12-24T22:39:16.348988Z","last_seen":"2026-05-22T17:22:58.055376Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f0ac7f3fc3d476e0e304381709904b9","sha1":"6881e711055904d12f071ad09558d20227de0207","sha256":"3fcceb11e44ccb654e81481159a6690d0648e643593eb75ca8dc1bf0f9142000","sha512":"f2fda214d02543740c7562dbf0e1911408e434a5b5f995b478ca7f9b762870661ed1779b83dec1850c666e4b6ac2c961a74fa7cdbce7049f05c40942966f7bc9","ssdeep":"1536:E5CjHdDrijOxrxfp36c+5QieP8/pLkVkJy20wpoRLpVxcYs+sdFXAPmO:EordDuj4K5Q5PIpmkJOcYsBdFAF","tlshash":"cda339d67282b03093f786e7a0bf6212b3395918340d8410f17ced6a396a9c79177f6e","size":103605,"data":"","first_seen":"2026-05-12T12:09:28.867481Z","last_seen":"2026-05-13T08:36:34.76013Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/tr/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3166d5139ebca4976a7df164026ff20d","sha1":"d7405b66cf00d1db4dc3140d6b1c63bca60fe4a0","sha256":"b297727d234af0837389b8bcaa1e72f4d0b62cfc126a4b9bb76201c5a52755ad","sha512":"ae0db71fd045eb0b103fd15902be9eb9a72763fc8494c7eec08ec13288bb0a46f320674f46a6467ba33f3869d3c388f15a83342bbf86aa38ef1810ed930d046c","ssdeep":"","tlshash":"4390024d71877261454126ed546a1016d3354480561c0113a7010081389814e42a5b8e","size":52,"data":"","first_seen":"2025-08-01T02:35:18.735752Z","last_seen":"2026-07-06T22:32:47.104782Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index.es-DtbtQDLm.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0444bd8dc6abe79ca5eff79877354386","sha1":"80e565557fa25d04a7f71cec8481ea5c914b622f","sha256":"f08f94733e6ce7f9e922b5dac51d7e48f438798a4549f6f864796ffdf526a56f","sha512":"6d179696c2fade282b92b7b3b81bcb745b12f4745b6ccda17ba0485f013d75c9a03a9c3f87d3f77487e5449e959b16df313640136d5847bfeb21d99b7f4a2085","ssdeep":"3072:bzCtURKZdQZvAUmXKAMJtSu7vYK9u6INn8P1jbJphlzfloqFnN1Nd6UoY:bz8UkdUAUvJJMcvYis0ljDFN1Nd6UoY","tlshash":"cf54fa8472a7f47543d665a8943b1542f23a5c64700d902cf6acfceebdac4499a3bf38","size":295291,"data":"","first_seen":"2026-04-30T19:32:29.772123Z","last_seen":"2026-05-14T23:49:57.490199Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-D5EcCQyh.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a1be255be1f0ae59f0935129d64aefb","sha1":"951336661c010a2352a00432f4804365f8adc748","sha256":"840ce35b91324a5d62861bd2a583a2fae8cb05a344269a57e827065680726b66","sha512":"e5227a276b6c7d284e81fc14f3828a951668e71b5e46d06f42335923bc870fe14420823f285c17e988d15a45efdc169ec27f50284e2486f9f1854a5fbe19491e","ssdeep":"3072:mrwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1Fc:WwhFHU4HNwFH7MoOWexZFHc","tlshash":"54f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","size":157557,"data":"","first_seen":"2026-04-30T19:32:29.92888Z","last_seen":"2026-05-14T23:49:57.306857Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/CasinoJackpot-CNQNWl4L.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f05c92cebcc6128b6ce04f8f9183b6a7","sha1":"a8d7997f5441d86c3b2c9fc4d49a4e08f126406e","sha256":"6195afef82d1ca888e96d2b48afd9550af5ab3e31a261ccc2ceec0ce87d9dc1d","sha512":"4d63d5d0b81a0563aef4cfe3c1acf8171d6d93fb1f780e3066f8062a06f9e84e3dbd8194c55ed7f65fdcc368fb5cd1c64ae807c642461808aed2b6ce44c685bd","ssdeep":"384:VWm6srKqqF3EjFOFEGOpOpeHMtGRxeG/PcyKx29boP8FJdO:VWmB7CEGOpyts/U2bdO","tlshash":"a8525d05f012b7edbca954f7487ee0287a5e1aa9c71808bcd1bd6c313d2c855760b7ac","size":14340,"data":"","first_seen":"2026-04-30T19:32:29.89895Z","last_seen":"2026-05-14T23:49:57.375718Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.BkPmegIK.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3fb8103b1c47a3c17730d845e4e1e7fc","sha1":"4a04ad85e28141b7706ee724ec3eff494475e372","sha256":"b236405a130bf73e46ed9bb149600b23ff1652a570be15d3b217a64c801ae024","sha512":"dfd21d15f709896004a6e88fbdce600685f3fce824de8c16618ef9aeb2042bef64c722b48e79612ecd355505bb5e5f6f3426220d8429f1c87d22df2f1887f37f","ssdeep":"1536:VL9gUh9CvquGSVD7dfXkQAXB30qOFex8nHHvDZECnjMWWAGYUhWd:VLqUh9CSu38QZnvFvQWFpUhWd","tlshash":"14d3f8e83951f9616bf302a710af5807733c292b680d4960a211fdddb9b841eb17bf9d","size":133258,"data":"","first_seen":"2026-04-09T11:23:51.32121Z","last_seen":"2026-06-16T08:53:49.926385Z","times_seen":5244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35b1d82e5ee89cc581e98f4618de7a15","sha1":"c06bd8849516b62c229a39c1d928e4fc5fa70d02","sha256":"d3adb810c5abb24f5fb5f0397d7206658aca0b3177448f7484619ddc3473526e","sha512":"a5c4c1c07aa5993f9b2758e5e91e024b2feb19aaa197678151b71c120bc18e5950005c5f9706cb777bb925385a5b8f83a304c17aa1976cae3ba5c955b5738244","ssdeep":"1536:T/a82omubKJDEzxv/0iKNLVensyQTXeegsiHVj:Zup4yVenZ+eU+j","tlshash":"92534d987156787316d980f0a17b670373267d3aa94cc890e817d8653a7cdca9233fbe","size":64227,"data":"","first_seen":"2026-05-12T09:01:59.601109Z","last_seen":"2026-05-18T09:32:57.236378Z","times_seen":8564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-CypFmzSc.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6381d5ec167a888ef28cc49ade1908b8","sha1":"ae32b1ed887028ffcd5a3c8f74498cefeb4efe9e","sha256":"86518a0f26dd9191250065a91a38045b37afbea90b35587e52cd84952e4886a3","sha512":"b1f3a869a41ebb0fba666b3381aedba33b8178d76a11f6a7e8457bebb43cfbd102775ad1257c352c1e30533df321f1022bcdf1c2be6160f21d87d7bf27f3e2da","ssdeep":"96:cCqtCFVeh7FHpokS73s9lsv2InwLRiTvHUkmEQKFr0FdWpA6u6PEDdxrOq+IHWhF:x+ljijHf/0FdIuSEDdxP+Vj8EB","tlshash":"6ec1b85a31d07534c6e344a6914f42aeee3e7638f00f5060b23e9c5e3ba1115d6a3ebd","size":5966,"data":"","first_seen":"2026-04-30T19:32:29.79103Z","last_seen":"2026-05-14T23:49:57.416388Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/useJackpot-3DH8fx3i.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fe01604ee81ad32be66ed3de6f32759a","sha1":"b8b9a9e77351b5b822733bb6fdc5c725482b1f83","sha256":"bd350319d56a5d0935d6104ffacc8f42b9ba1e0c1b4870aa6c71b60129f8494f","sha512":"023ba555f3812668948d805c41b928f62dcda0f7326243aaf89d4122bc07651bad4b65cfe778c6aab5f543d3d4cdec1c7eee83ae19c6c0eb61c310dd988a507e","ssdeep":"","tlshash":"5621ce85c059e5f8f5cd8ca10167d72a1b383f797440a0a0a0be5ebda7a8d45b6a0f92","size":1420,"data":"","first_seen":"2026-04-30T19:32:29.86687Z","last_seen":"2026-05-14T23:49:57.34045Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11eb69468088a53b09b6b1792a055bc1","sha1":"fa1fc26734836a15380b1aa1364dd74c00b4998c","sha256":"7072b40854ffb6c7712b3881cff1a785592465e4c2dc603a33502ea90ae81c62","sha512":"d49b85fbe63660e794505219136a90d6fa2ef1ce70b372884fc30a5312ae3505fc4fb9619bec3e8004294190790892b9a9838af5724780a8fe8176980f7a74ce","ssdeep":"","tlshash":"c55183ebf87660b60d6720bd5b2fb504b93aa0071056e480fdcc94a56fa0f550b99bdc","size":2722,"data":"","first_seen":"2026-04-30T19:32:30.012353Z","last_seen":"2026-05-14T23:49:57.538122Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.BGQ9L0F4.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"43411924640cc2b711708598f73f735d","sha1":"c26b20424279ec8528abcda60adbc3e40eafed3f","sha256":"1323be012b8bbb3fbc8aa0991412d1ee05334a0bf77b922910fba46e65636fb4","sha512":"b598d70eb381d52800ea90a9a5417829340b3e98e1eb6231505fd39b00be72a3cdd85ad1ce092f42bbfde1ab92e2dbef7bfe9d3e344b9095e395f73a7b922853","ssdeep":"1536:N+ZXOfazN1Vctp/ItXqDBKHEps3A33WjUl3bJS+WgxM8:EZ+M1gp/INX0GzwlzWgxM8","tlshash":"4e731ad1f295f5398be7a8e551355103fa3a7918782c8270f32cce20315e686a177fab","size":79623,"data":"","first_seen":"2026-05-12T12:09:28.81507Z","last_seen":"2026-05-13T08:36:34.816246Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/LiveChatInc-Cwww7iu6.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55cb0c72b55ee77b205907d26c6a209","sha1":"b64bcd8e422fdbf5c3a71d43f36ac655c3cf97fc","sha256":"c087e3b9f4493a6f8d40206452506dd1228437518dc65f906fe481abb27186dc","sha512":"4b1e74faabaa696e892c4110a1c36f7108da695e2cdbd13e0b9de8b1af5291caa0b89daa205e8ac0660d3d0c06545caf82a406cb0ba1282fb88ce4e3dfe6425d","ssdeep":"","tlshash":"0f5185ede07874b4a37927e6323b771f3215aa14a4484cf0367c4f166a4b58b8076e8a","size":3156,"data":"","first_seen":"2026-04-30T19:32:29.802432Z","last_seen":"2026-05-14T23:49:57.391145Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"216.58.201.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da09de73cf14062966b62f0166ea81b7","sha1":"ba6cc5c4381be10c9e373850ea951931615e912a","sha256":"9de1e0e7f8ec1327536b812f25ca2b154b56c79aa0f202262171e3ccf6bb8e60","sha512":"ba2e5585bf36fabd2a70068400bcb3473968c6a7d6158273fcc53222850e460303abf70c05256f1d21c510a32f6d6842e886eefbc6d3f5420f9a40603216d388","ssdeep":"6144:MrL5bRuPtxG5+qI1gfCw1oUO+ahSom68/91FH1ks2P6:MrL5bRuPtxGPfpoUnVD2y","tlshash":"719419cdb7d6b4628393a474903f018fa67a28e2b44cd894f186ccd42e706aa5177f7d","size":418018,"data":"","first_seen":"2026-05-12T12:51:51.225895Z","last_seen":"2026-05-12T17:10:48.665517Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/HorizontalNavigationListItem-DfugXUII.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"164069264e8093d7a19d67cb5a5a212c","sha1":"3f248fbe0de759754440b66e33e5f4290c15e528","sha256":"3f7407225f44b01c700c3e98816c1b32428c7a846d39024a998685c5fe313015","sha512":"a15e65f66f8bc26b058052b81fdd752c5c444f033486815a7c1e78d9c0c870e708f386578ad8dc6ed500dfdb84816332904bf05ac621a9e0b9e7eb74f745c67c","ssdeep":"","tlshash":"1f01ce12f444dbbc9a2b48dc9b4e604672564affdf382ce1a0f4e0011a384467a47fcd","size":836,"data":"","first_seen":"2026-04-30T19:32:29.873294Z","last_seen":"2026-05-14T23:49:57.349506Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/Odometer-CVXFbm9Z.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"363099a7aa80b08adbcb4fa6a5c235b8","sha1":"5df01cf115d0dacefc09e501630edbebb41eb84e","sha256":"fb3c5f2d67d192d60ace689027fafe68e0f2625283ce35c94499366b80600157","sha512":"e73d4427fa035d5895dcf0d088df617d1df84f70b05a7ef046075ffd8c8bcb2a9a36ed0efd3dbd049ed1cb37f50f3dade4d202c05d84e5b7f309fdfe59025fbb","ssdeep":"192:uAd7+NJtQaM1S0KCL529Xskmkjm6H/I7kauLPH7BNeSYpkYaSBpC7Tl+ea4PFG:iVQaM19K0khm6m6H/LPyFtX3HeNPw","tlshash":"45622a89752272344393b2a055bb0609773e5d6a3809405db67caedabe32c19d12bff1","size":15625,"data":"","first_seen":"2026-04-30T19:32:29.722128Z","last_seen":"2026-05-14T23:49:57.372946Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"64eda2185a5ff2799c5ae9f0d85dcf6d","sha1":"f458661a1d6bd37318bb439299cc5b0589413110","sha256":"4bd2e374a15591721b9040ba64af8f2059a63d5f1f93c6ea6629c8e29d1091fb","sha512":"56f14e941fc647b0ecb2bbb975e4be897b6ae90f47c128d950e90bdcd80dbfd606b39bfcc3e0437671da551c549b8ff223c11c786ff6b5b20be2ed1598a77029","ssdeep":"","tlshash":"52f002bb182021295c9514c7740e1688e0722a5bbd2729b3543344053468f8b2b6ab5d","size":603,"data":"","first_seen":"2026-04-21T12:24:49.109122Z","last_seen":"2026-07-16T16:07:13.099587Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","size":40,"data":"","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-08-12T20:39:19.664951Z","times_seen":29937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.BJJ-MO8U.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"101cf8ef0cdc7286add76621bece56b3","sha1":"4aa34fcdebe3f90afd36c860fb7dabf04850e010","sha256":"3305a5dc7e4768df6433fdf5d272a7da5a4109c498c8b67d653b00c0c42a06f2","sha512":"691d4c1c446a954cee31c93d295dafe1b4bb8201eaeb46b4ee56741213d061615cb9e32d8443d09ab6b6f8e1644cebbce1bf32b8db10a5f1f12b6625ff08b11b","ssdeep":"3072:FdmtYfmF2FKLbB/57O5CxGWZ2Pfp8kE5MwfMH+rUqN8v5iNRawP3:TG+mt+5CR0Pfp8BMIrnciNRt3","tlshash":"a2146cc4f18ab93587eb34e2587e1002f63d6d18b44c8160fb5cdeb639a518a9277f2d","size":207172,"data":"","first_seen":"2026-05-12T12:09:28.959554Z","last_seen":"2026-05-13T11:11:34.444827Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/events-CJzlsMH2.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"40cd86acab69007856aafa75fc5d55ef","sha1":"16816e82e5dc5d9b1bce61e7b2184df00d5678ec","sha256":"3c4cc32c6e1beecf75bc446aefe235d58fd5583675ec76da6f7ccf1f83f8a5ef","sha512":"cfa241efa598f94e100e60198784b45f0e5e64b8e5394f1d4f670bdcad73e951705e03afc719fd239f7e2ccb059d327c9934e4ca3fad778302a9d7d3a5626df3","ssdeep":"96:ud9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqK:u3IM2sWMtBq6n3PzK","tlshash":"0bc144ccb38574b013e7e3abb07f520bf134a598740c5108b61aecf9696bd9e4126b78","size":6142,"data":"","first_seen":"2026-04-30T19:32:29.831521Z","last_seen":"2026-05-14T23:49:57.48702Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/if-defined-CWaLTnLW.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"11916cc7acf39a179eba86fc2f2b369b","sha1":"69a4b182f97a708c1dc0d9c1a5c9775c6376a57b","sha256":"d59e3142307919a3fd08dfc1c3326f6004432b617476c354ea2ce2af30668c48","sha512":"6603841b87172a020a2e0727faf1cc3b0e3c03f7cd6aaa401e1a72ca0b6503c41b937ee3403a8908797ed56f247f49d0e33a6bfdbc9390b46e2e8785230d7389","ssdeep":"1536:XsetCKv9nc1kM27Eitmqog9o/LxGRbVkTh8TEr0oGS:XVgZg9o/LxGRbVkTh8T9Y","tlshash":"ee3308d472e571a243d386e5843b001bf3757824382d846cba2da9db7c35a4691fbf39","size":53295,"data":"","first_seen":"2026-04-30T19:32:29.82386Z","last_seen":"2026-05-14T23:49:57.399754Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","size":236,"data":"","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-08-12T20:39:19.675698Z","times_seen":16402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/SmartMarketEvent-B7WtyuM0.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1544063b17e5106b1e0a16a20a85d1cc","sha1":"e08ee3bb0960946747dd5d229b12c8293caa74e5","sha256":"26d31ddc1ab40706c1bc90bfecae76ed6eb187884bd15daca3f66b13a638b923","sha512":"5a7b32048ac5222429c116c489e1017a9acff2f43124e0ba6af58234cb241cb0b9abfa2dae74795820c64cfc52d59ba68c5443c45ba06120439824cc956d6423","ssdeep":"","tlshash":"0611efe6d480323e0672c8bdd1109b42419c13e7cb200269e98b86f573fe0fea34ee59","size":916,"data":"","first_seen":"2026-04-30T19:32:29.816947Z","last_seen":"2026-05-14T23:49:57.485522Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"216.58.201.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5cc7c8085e342bd5fb2e616cafbf0b4","sha1":"cdfaf35d408a74b20b43d5f5252ea028c1f2452c","sha256":"6954d05ff6e96582e61e28a6bc003862b715049d41a8e56849a61058ccb7efde","sha512":"c2d3e2060a9441d24ef37ecde23de1c31a93ca5998d19230fc87c6602c186894cf54d88eef10ace0b751e5472de2d2b98d1883799b56f85689de2779f53d92d1","ssdeep":"6144:vAHqI1BsYCw1ou4wa+WhSom68/91XD1Chgan5UAyb:v0sYpou4wtRwga5Yb","tlshash":"49a4f7cdb3d675625396f478903f018ba57b28a2b44cc899f189cce42e7469a4237f7c","size":477125,"data":"","first_seen":"2026-05-12T12:51:51.025749Z","last_seen":"2026-05-12T17:10:48.681551Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/tr/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ab5194607d8db08f9abe85264322389","sha1":"105aa6a7c0d330d097cc7c9f6989d8223f23adf1","sha256":"3728c769109ca09c38155c787c6e13da31835fc34bfc842f7415f3d3eca691c2","sha512":"c48df33aa42a930e98ce83dcaf1dc59293d777ed22f746eb7ea8e299fe1622aec1f07ee914f18decfd1b998bcb691f84f58a5219a5e5ec1c230f9db6a331de8d","ssdeep":"","tlshash":"6ae0a31d1c1eb46227b419a8e237895530d5130529462655cb87d4543971cc554c6a4c","size":423,"data":"","first_seen":"2025-12-24T22:39:16.410899Z","last_seen":"2026-05-22T17:22:58.329852Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-Ds8oq4WI.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39ca76baf83d524ec929482642046401","sha1":"d86c44b6843eca0be0ffec1220e68cbdca8e0021","sha256":"a3ae0ae8625ab5f6a393e9d791d0fde10d214947a45c18f4d8417b38b262b95f","sha512":"ca230f0b3535b6ec6745b1bbb9eaab861d38b676f00eeb74b40b05049aef57ffb968afaaaa3689f83365d5eeed6f4145f7146597dadd688ee72e3a6a3a0076a7","ssdeep":"49152:X2ixTm4v7uvqvhOiKY7BbAZaAfUGNLVEKgw:nBbk","tlshash":"7c95c50b96a0287a8233e3796f2bc519f925472f5284861b7e7c965c1f7341492f2fec","size":1933207,"data":"","first_seen":"2026-05-12T12:51:51.269822Z","last_seen":"2026-05-12T12:53:30.153419Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/BetslipButton-q9-vX9A1.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7e4933f244dd63f3f281dfc36cdc554","sha1":"6a65fb5c6acacc9b732e5735d500faeed0a8a911","sha256":"6f39a54faf2294afe759db36bde99d4bb525aa65b739bf1f29853220ebc0e802","sha512":"d9337e5334baf246a9b29aee8e33274fe7e62c96f90180df21a07beb8fbbbcdfe2d707cc1950d727472806f6c22f594219175a9eefe616fbff7c94e382820dcb","ssdeep":"","tlshash":"14e0f186c848c3fe07461d81320ac101382255bca344f5d280ee7c557f7458acc5f92f","size":419,"data":"","first_seen":"2026-04-30T19:32:29.932641Z","last_seen":"2026-05-14T23:49:57.519182Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=bc48296","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"914072ababccf9be7ab6560f2b73e2b8","sha1":"b0add509be06fbefa63c079e34fd852f53e7d030","sha256":"c49678dc6c2e1d77cc759665718d2559d4b09001e9705d5810ec7d6b431f5dda","sha512":"1a9ee5852d4befd559fb5a557aaa2ee96ca1a7b113e7bc391f71b0f2f3b32099c83d7d6f36bee253bd8168ab5d2f3128b1bb8e56abd3ef8929c533d918ace0ad","ssdeep":"12288:+iV5uogEvtEvvEvtEv1dgHg9quyqXjb7EqGDeuPqK3c8WsIJyZmoJwCFaFIFSAJs:puowdgHgfyqXEZFJTIPgKzYJRa","tlshash":"099554182a6bf3849409d0d7f9373d84c59ed19aa44764d24fb64bf31bb2352eaacd03","size":1880992,"data":"","first_seen":"2026-04-17T00:47:10.255432Z","last_seen":"2026-06-09T00:47:26.343022Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/Firebase-PdGS33ax.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e71d3b9ca88b858220b5cf74b78c49b1","sha1":"e32147e933a304a1db430ba00b24899509424542","sha256":"fdadc427d7180a8799bbbc2eb139b2a5d8f0b20cef32135f74653ac9239f565d","sha512":"a32042324e8523c0dfc515aacdf7cefa7196746510ab82481fea71ee4e97fe109c29efdf3335f20cc0584bc802f2f458162540889a630f0e7e1b5e88247b9980","ssdeep":"1536:73B1pIuKtjc7sMg/uwIPmWP+pFxipJYBystMLCv5pvrYMUyem2Ps0cRG3oMLJjDi:7R1pIuKtjc7sMg/uwIPmWP+pFxijYByA","tlshash":"bb83b4bd7ed1363317f085af792f948be219c658280f9394746dc1d91e3a50a42faeb0","size":84994,"data":"","first_seen":"2026-04-30T19:32:29.747316Z","last_seen":"2026-05-14T23:49:57.357985Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FavoriteGamesContent-CvJnpx-t.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5df5255826aaca0674deeaa943c3d10e","sha1":"bf214f4f97aad9080d8f606a06a4367c4b1a9984","sha256":"e2a465139a450c2bff6ff7ef41d3ab40b31ea3f13231047f111d6b297057a7d6","sha512":"a3812bd97343f15e0cd9ed3340a0ad232ede1cc3f4f83d7d1980a9cda00345d45ed062875ae62cb21f4ed51e70118d16c3d9de1f9dad6846f3a7ac9e13ebb73b","ssdeep":"","tlshash":"d051831040445ff8ab9eade61f27c0540966038c6241c17e69795e3d3429a41723bffa","size":2787,"data":"","first_seen":"2026-04-30T19:32:29.757983Z","last_seen":"2026-05-14T23:49:57.34771Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/tr-D4j3hTwO.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"042cda35eb38a3fe827ebecd15eef7d1","sha1":"102c2d57230473b84e9e7c3629eb2b377ef3f019","sha256":"401f803e94940707e7a4227dbf90eb43b2ebb6d99af5e89656af57d7075a8cb4","sha512":"a2044dbfb62f4aefb50bf02cc165aee3a43e6b76e2903390ff31bfe478ddabdeb3e9ac3decaef67ab9cb4d782d822e74a95a4968e05103c19d5181c4a581594f","ssdeep":"","tlshash":"e831824c2946eab287016883882f5f04f80c2a087136f1619ba4d421bab09ee807eb3d","size":1460,"data":"","first_seen":"2026-04-30T19:32:29.829073Z","last_seen":"2026-05-14T23:49:57.368212Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/withPanelButton-aAeMPmmR.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"135099bfdf29dcef1a4ad144e2519eb9","sha1":"340b47f364c6fbbc8187cca7d8fb55c78ad89d63","sha256":"2104817f5665831b4156571e8b53e0dd675b5cb9df5af83c7aeaa11b993733e0","sha512":"3933bab1aafd06a0d1f0dcab3897db9bd30c652b9c35c87f7c2f562562c3dcaabf4f4c95b64a76f8df589fbd6cf87d284225c94cf2884368fa0b5d0faa8fa789","ssdeep":"","tlshash":"9211f0e4f5c4adb1e0c40188577b2cb6719a32d9dce1149021b6c8da5fa90489a5e9ae","size":1090,"data":"","first_seen":"2026-04-30T19:32:29.865626Z","last_seen":"2026-05-14T23:49:57.443303Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/ButtonWithAction-aRNeoFXx.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25ece52b40728ac71e7b869661677dc3","sha1":"1bc3c13781d3e5f633ea81c18223bd26f0961024","sha256":"27d5490d9c8258530202cabdbaf380b7955ec0f3ef6d2d556ef88a8ab8342d73","sha512":"aad4894c7059184b2b1153b1e205bf166f1886869ae95d8311a4f77bee7a4884501a8d90a15c51ede3143a88dcccd4a07e841e7d34304f1b9d509d59ae87ba98","ssdeep":"","tlshash":"85d0954b9481d2f903c57990b31bc0112d156d74e7d89551804c78543b3259e852fa2b","size":268,"data":"","first_seen":"2026-04-30T19:32:29.906761Z","last_seen":"2026-05-14T23:49:57.435066Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/DisabledMarketEvent-FWjdbj0n.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2004c33aa5328e146ed737a41dd0257f","sha1":"082f0a2cdcfffbf505ece618d440d9585d0578cf","sha256":"23fe4259f06079b20d6ce27d573c0aa7e46c7d2b900cdc0e061d4a9745a0631a","sha512":"4c0607f58495b89c6f493e9593e35634f0d3f971adae574433a223d32ced36d778d45f9fc1d9cf7113eaada8aabebbe5f78ac5f0dfaaf25f1d98f9aaf35723ef","ssdeep":"","tlshash":"8a51866df290fa3d993600dcd27b1f1f201a17a2d6560592d0be8c29155c0dd366ffd9","size":2718,"data":"","first_seen":"2026-04-30T19:32:29.72443Z","last_seen":"2026-05-14T23:49:57.308507Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/UnavailableMarketEvent-DRNaHNkz.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cb2457d309aada0d78eff12d339e782c","sha1":"c58528547f1191917c5d6fb496c75f56a10dfcca","sha256":"9e251ffab01f3eba419fc34cf9dffbb417b4fc56651dd8d06b1adc5270c29645","sha512":"2871e687a6b1d44ed141f560cd410278e8fa6ed8badab7cb9c0919a0ad0892c3eb26f30d8818dc84694d3c7dc7b87ce78795ce6431f1f7d71ff5f24b27ce5cc3","ssdeep":"","tlshash":"ece07d0db044bffac0251cc8ce3d8b0d600307b8c7e945c391a920282b34235360ae9a","size":309,"data":"","first_seen":"2026-04-30T19:32:29.782979Z","last_seen":"2026-05-14T23:49:57.395432Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/___vite-browser-external_commonjs-proxy-B9AoIgFt.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fef88f6f37f64d0df82fb5a68cd0dcd6","sha1":"6eb3d8ae8ea34dd19374829cda9b4ae6aa4d442e","sha256":"5409b177a1223c505c46b6c633dc3834c50b2001e9e444d20f0779083c754c79","sha512":"8c08717a7134bb473cf26a6bb83dec4b50589eba04706c5bf1ac5c70a74733761d20ec107b38e864585b562a592f46f1b223b15540bb09b5f2444a7258095d2f","ssdeep":"","tlshash":"80c080495694dcf0528b1d828719d401d54c4d6db3f4f5f0bb4c9d5512025cb62b8f57","size":179,"data":"","first_seen":"2026-04-30T19:32:29.761128Z","last_seen":"2026-05-14T23:49:57.432585Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/DataspotTracking-BU1VqV1o.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1537c784217bed55afd36ac3a9db03b7","sha1":"5a3dd0ba87b1e3f30b5a1e14ead051ecbf00a6f5","sha256":"73de071fc0b661ff772e9cb6dabfb0d70f4061a8675f9be5ab9c4c2f24997ed9","sha512":"0a4355904615992d840871bedf203e2d35d40fa4f6da19ec575b63001c1f42c1b8d206d28513943385140ac50f8b2b46d9fec9aac801a0bd1bd88d3b932e169b","ssdeep":"192:rjybYcB+h592WkO+bNKb0e35nBaCHJNvuvXvqvxgFzN3IYXge3AmYOchj:rjaYcB0kVKaCHJ5Q/0W1NpXge3gOchj","tlshash":"78020155641e78bd6037d6ad0d4722a208387041e1339de076aacf5a9e398c28bf73cb","size":8581,"data":"","first_seen":"2026-04-30T19:32:29.810585Z","last_seen":"2026-05-14T23:49:57.394133Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/InformativeWidget-DHYaBHsY.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb76dc741d1d0089382476835673dc44","sha1":"b8b5d782f8b1129d15d1dede64148000558f5782","sha256":"7f4e527158d0ac25af914aa9386c6a279ab50ab7ab6e4a5f0a46b57a7e8c4c32","sha512":"4cc9a253417392505e3f8df422a82a4c80becf1cc92a4e47e29665a82a425942c0ac97156322e9f577579e2b2cfdaa7a917d963999934851919141b9552a1787","ssdeep":"","tlshash":"c3117586f594d5bef0390dc44256d0946a212ee4cf38e4e999b5340ca87410bb7dbbbc","size":1088,"data":"","first_seen":"2026-04-30T19:32:29.840519Z","last_seen":"2026-05-14T23:49:57.328562Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/jackpot-jNbP6Duk.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"58c6b0b11883e69b52c41fb6969432ae","sha1":"cadf0ed3f23639098da9ed2b570cb9b949fd260b","sha256":"efef501e418f3eb97f1e4de01c024b8a3e930e7cde7f2019cb209994eb608bd3","sha512":"6669b90e56e649504100d1dd9dd52d1a9481406409af6c014f8a4c02e29841d6284f1fdd26770535194877e9586c983aa5c17227a5d26b9fdc3354616e3ee719","ssdeep":"","tlshash":"e1e068eed8c08dfb967007552bb418840e2416ca101ec9e4be2672612800b8828f8239","size":377,"data":"","first_seen":"2026-04-30T19:32:29.843557Z","last_seen":"2026-05-14T23:49:57.413027Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/HorizontalSportsList-e7xvm1uO.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3ce4378be8d26dcfcdeff97efdc574f2","sha1":"e4107ded57744f21117c0b51b32b710c445664e6","sha256":"1cac841c416e09b71f68837ecb39d1a4bdee6813fdc2f4283d2e524758b9e3cc","sha512":"1ab84096c771a3adbad79621354f4f04324527a34dd29760c8393084f36c7b506d44de3d7002e01aa99a05b0bf241d8672f5740947a15b763b9aeb1387b95a23","ssdeep":"","tlshash":"cbe02bc2dc618af45a1e88eba99c24857012047cff566664d298a2282b7508bf76940d","size":423,"data":"","first_seen":"2026-04-30T19:32:29.763259Z","last_seen":"2026-05-14T23:49:57.348732Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/usePriceChange-PEKvXa4R.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d8c5a11011941647d3e73d49e4d64112","sha1":"d040d45824943678aca554d0132429292e8c7932","sha256":"03fb9817aca8dd670b1976b0c8851f4501fac87fe577467b5f705b030c81898d","sha512":"68c4177ff04afd0fe18f174afee8b61211f92a3f2b7f0489be81e3c4232f56cd911301ad15d5d204c262e98cbb1b73aadde972ba2b8310158714088f5bdc1ae5","ssdeep":"","tlshash":"9ff027bd24901827545e0cc4c2a485571fd126e96bb9831ab230c82d36589ae06aee6a","size":471,"data":"","first_seen":"2026-04-30T19:32:29.777225Z","last_seen":"2026-05-14T23:49:57.408477Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/CasinoTopWinnersWidget-Cp9RoxNY.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"166aae5d1ca790b8f310208615145abb","sha1":"6553cd3b171ef01f7219cc0d588f6a1f6846632d","sha256":"66c8f1cc1c1fe8fea76681b1dd8bb37c19f79020757d42c33cb5d1a7c1f3c321","sha512":"3cffbd5e22de1e96ff4f373ea4696e38f9df74b92666ae3f7c3af51fa7449231719068e6341232f69a92c55105995728a7b7a2b4bcf34f1f5e42bf0aa4c3f406","ssdeep":"","tlshash":"4d514506d0049f7cc35b8dd67c654019aaa60aaad5306ee0f9bc1a118b741ceb59e7ce","size":2703,"data":"","first_seen":"2026-04-30T19:32:29.914354Z","last_seen":"2026-05-14T23:49:57.330382Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.BLfmipM-.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ca051985baa53ec085ebd9096d8fa52b","sha1":"0d227a057674cd49f399305704e6255013253725","sha256":"6d1b8f21bad25678c322a949ab887efe69bbec0181b323a0c2c6e9656e5137de","sha512":"55017b6de24d72b94b86b6b8e32afe8088b2941b6fde446d384dd755cb030a78df916a26d0265245c58f6d7a870b4dd0bb1d414c2d9c31cb610a42f122a8a3f6","ssdeep":"384:5O9SGx6PSW5gcJkswSEQR3eEyHVqqcyOtlcLDhlQCaG5ENcecci5EqYHM+p:5iSGvW5gmDdt8qVyOncLDhlQNcecD5b4","tlshash":"1aa2f9ed3192b03443578864406f552bf26daca0b88d4c40a166f1e1bdf8efd9773ba9","size":21459,"data":"","first_seen":"2026-05-05T09:53:37.889339Z","last_seen":"2026-06-03T09:12:43.249499Z","times_seen":2511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/getLiveGameAdditionalInfo-1e_kccjA.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"82f139f8c40ab08eac77e7b49301341c","sha1":"8d1f84bc72c0d8e92b2b2d670856cfc262672552","sha256":"56e77d237a0ae4d5b2966631ce43e483ddbe65136a99fc43757bc9301009a738","sha512":"13836810b57c9f0b29882c3ad111bf1208ca2a27deb5690f7981379b05abeafa9a4d8b2b6a989289ac33c1b2d2e19dfd2097a66261d675d95e38912f9071f2c3","ssdeep":"","tlshash":"632144b270ae92bfe5c94c9457b01b31a2b1ba09380445ccbb3cc91928774c4a7e2039","size":1151,"data":"","first_seen":"2026-04-30T19:32:29.789826Z","last_seen":"2026-05-14T23:49:57.396307Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/gameDataProcessing-DwOfc3Uj.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"815330b586056d0998ced8d5c5af7d84","sha1":"60cd097a6e82be034577bc789da45127f679f5d7","sha256":"3f8f6306ad6169aec22b45a7d1dafa246b0e5eb494f61fae7ab13046fa4b5a05","sha512":"c3441eb85b91a4b47c6678011c7f47f8a576439643fe1679eb3d8acf905cfb1e95abe6244af7d2457e8f54391b187d894acdcd88b91f9320cc3dd39b81cf5b38","ssdeep":"384:lwphrrZxhxlVz12awqhvTXDsB4Pzenac0aoK4A1n8:lCptXDe8Q5X1n8","tlshash":"f072750b8a024c12c97e4639c0ae15f1b9781b32e8b8cdd11a655c7bfb5fa5b31e1738","size":17259,"data":"","first_seen":"2026-04-30T19:32:29.788603Z","last_seen":"2026-05-14T23:49:57.436928Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","size":60965,"data":"","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-08-10T15:32:58.760263Z","times_seen":457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30bfddcdb3764a782b7c8584021d1d6","sha1":"64ed02149d0db57e6c1d68992361d7c1330a663a","sha256":"5a8894efd9ef253bc344f5587ea4fb4f4b8da39d4dbd49a390c2302898411623","sha512":"7f7061097e172e659abcf34d29c148da0bc746fde1307cefa2bcc88ee94db292ba498b3f287a8436b39f9e6d44d5e145350896e447ac7c3cfb281a91a5bc6c97","ssdeep":"","tlshash":"79b09222c200942a24ba8118239fa6073110537a80660c1b143c64a436e610f80a239f","size":105,"data":"","first_seen":"2025-03-02T06:33:06.481005Z","last_seen":"2026-08-11T15:10:12.016611Z","times_seen":26484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.CQ1y8pQC.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"269802836e21753127200aeb8158e9a5","sha1":"0911403a6ebcd523e4a5eba7dca35f81c6c44dd1","sha256":"71dd9b7fea77de65e34ef38129b1d587ce5c3af28f5c3dd3b5a079c2935007cc","sha512":"f02b1a73c985601a515f903b1b338c9956b226418fe23a06543fe23d954910d519a6d45ba2806c8444769006d4b8ff7690f52ef74d87d133728bdc3bd3fbf75b","ssdeep":"192:t7LbrRc33jyJybQI/rsGUWlKZfZwxlcz7X5tXqjdEUyVqmh3q/La+UFkn:t7SjyJykcsGUWsVzt6dEUyVqU3qj94kn","tlshash":"64f10abff381f471a3eb94e0991a0103b9390655756d8070f62c8e54a16e6c4b277feb","size":7900,"data":"","first_seen":"2026-05-12T12:09:28.95756Z","last_seen":"2026-05-13T11:11:34.440927Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/StatisticsOnHoverContainer-Du7jPvbE.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34250df18a0a3bd2b86af389d5f611fa","sha1":"39b7147f17749173b39eb2c99bdad0057e34b8b2","sha256":"479eca31d4ee2296fbd02dca57f81efde5d4187349b07285f11b899b372c44c9","sha512":"e1c0872e49605b71c88fe49856101c1d18ff0cc4a9cc2fbd6c7171f9371b0a239c45a2e38cae0c17862a8f3c70a9465912caffbc1c168abeefde75235437f4f0","ssdeep":"192:FGn2zkXAsarXDxLwxGEE0D9AOgzmKj/e0o:oBParTxLwxGEphAdzmKj2d","tlshash":"a812526c158e5f69f41a8240b5202e35bb3a3877958d66f8bebc441fd3ce444bb9cb18","size":9782,"data":"","first_seen":"2026-04-30T19:32:29.945557Z","last_seen":"2026-05-14T23:49:57.518379Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/public/proxy2.js","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1296781ea2c9cd24e19fe155b42373f2","sha1":"d7ce9dffbb2482bc2f3795cdeaa727d99e49644d","sha256":"de74ac92be5c23abac0e045e3380edf98b53abeb1abc7351e98ec06a71a01359","sha512":"3922435bb5f624625705a335938c57a7addd890b26905e7097bbed9882d0508fd10eacfd3fa32cf5b570deece89987d97773fc9377c68416dc03707c32e4af72","ssdeep":"192:0e/p461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:l//Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"ce92860e927b6123447334bc978ba146be1150971d0acd847f4ce394bf85b6eb6b27ac","size":19498,"data":"","first_seen":"2025-12-24T22:39:16.372563Z","last_seen":"2026-07-01T19:33:43.411538Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026version=e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0_d0759614e4f00a7b48632ff8255d98df\u0026language=tr\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac48c5871024eb4e9d5c7bff779bfa91","sha1":"2573b1f20dd2a419de798683ac7d1b7a898026f2","sha256":"221de5fe4d05f615229e3f021636e9f6ad23651855c9d6aafd0d4ea15b75c1b0","sha512":"12a16caf3b0d06ba3b9446b6c04490e283a49ebbe36194f2186451acdf5df006de6556bfdf6cae8c7743f6c860a1fe8a9795983b7cfdfe6399a8ef71d42558b1","ssdeep":"384:XES0yW3FhCIgdTP3kQGpFq5iB/E/tuA45Jw3E7D:90VjUsQWcW/E/t05JuuD","tlshash":"f272fa084c6fbc3e5f6b27cbf8e9595fe0ee0755e1605827da8e843a62443c3229791d","size":17214,"data":"","first_seen":"2026-04-30T19:32:29.947489Z","last_seen":"2026-05-22T17:22:58.173368Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.lNruacqf.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"75e0827bf699f7aec7b3e67d85c2cb21","sha1":"597b11785b90d608e9516c175c80757fcd46405e","sha256":"a9631dbd6d6a5813d3cb5e5cf033f3a3976ad56234214d9ec7a1c90176b9180f","sha512":"f31e161fe46910b76ff61b1852e2ab3f24b77cfbd4c7becd1f8d9e124ec6c45b69024a3faa3bc42b91cd145ed21a8df276fbf10607208a0789ff2633c3b00b7c","ssdeep":"","tlshash":"05e0aecbe3047ee3f1c99de5c454d0e26af253960be0c7a0c0ce13b15361161ce44a42","size":432,"data":"","first_seen":"2026-05-12T12:09:28.842476Z","last_seen":"2026-05-13T08:36:34.797743Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/GameSuggestedEventsWidget-CXy_rPw2.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"291b25d43c6fdaaeafdb4eaf2f21bb04","sha1":"5c67e6a42e2bcaf3c382c2563b452b061506185a","sha256":"8875b2abd4f21d5af947e12ef3c296a1455aa27d76706fc2b450479b254c9185","sha512":"a694796c3aff7e14959f2dbc3fad8e6973c2463e87554b8c9da3d0d7ee404e0621d56ed5a8bcd3c1c5598603bcae393ae3cf5fda5fa1c5e61de8658b3f3aa9ae","ssdeep":"","tlshash":"6071e856e010aa39917341d82bef321814363278b94393c1b63fca3133e51926b6a7df","size":3710,"data":"","first_seen":"2026-04-30T19:32:29.795963Z","last_seen":"2026-05-14T23:49:57.356203Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/TabItem-CBgyJEAy.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"006315b1619ca2748ac3d5e66519219b","sha1":"6c3a32e0471cefebb7251b9bd5b32dcef39d3284","sha256":"6ecd2a161d8c7f3bbd34952d45890e770154110cca07b57f207839f3d1a0a6ed","sha512":"3541d01c403ebf5d686c2bb70963c8149882a3788c59d4958075dc4325cf500f3be081e546ccf268f4da6adc3ec76175472ecaf9fbf662c31c03d88bddb11925","ssdeep":"","tlshash":"ece0ab52b010f3f9982b44c2d27ed4c736120ddcdaa688e1e0a22044432e521f78ff8e","size":424,"data":"","first_seen":"2026-04-30T19:32:29.909004Z","last_seen":"2026-05-14T23:49:57.337328Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"071d1abcaa695cfa853dfb2baf589e2e","sha1":"83ac952643c463886894a0a8d8b37dbbb09eebb9","sha256":"f0697e0833302182c4aa63cd3ef663b5c31904f11f49fe5e8ad9aa218f00519e","sha512":"7bfe21588d7d5ffc6eb124b8522c74c5be9a7e690f149aa910c5d78f838e526280b0637dddffb0dcdd041f1656c488345267514e8f7a2242f763f56d21c786b1","ssdeep":"","tlshash":"29011685fc42b07696963628763bfa07516312255884a4335dfdc36fef31d87811368c","size":844,"data":"","first_seen":"2026-04-30T19:32:30.016814Z","last_seen":"2026-05-22T17:22:58.361966Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/19615298/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-08-12T22:06:09.73313Z","times_seen":28117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/DepositCountTracking-DwXH74aF.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbaa5d0b6fc3e943a771aab2877cd463","sha1":"0cfaa5d01bf240321aa51c21c9f77c01e34b0be8","sha256":"2bf199a5dfc2dd746b047653bc39b450dbe3b5faf2d5eb4f7cf13631c051166d","sha512":"b1df73524587b2c4d7ad1c4d2c9ab9c61813e224082d38e6d1d25b9c8d2b982ac7d295cd67a3611d57c0900fa77b1c8a89f258ba004abc1cad240a26c943c5b9","ssdeep":"","tlshash":"7bf002971474d6f889c93a4472c6e8b367f1755cba23c4c781bd8d8a0349415d5cdd2a","size":646,"data":"","first_seen":"2026-04-30T19:32:29.735839Z","last_seen":"2026-05-14T23:49:57.385258Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d894772cc8ebc08c554e305272fb743","sha1":"9630696cfb8fb02d834b6c2d590ebecc9e4c1971","sha256":"8822f04d16fcc6ebe390ead32df5d08238c7c383f466f401ebd9d235d32f434f","sha512":"20c22c322a8e6d0cee22113e4bdef0fd06e8b21ab65665bf648a3dcbe3857fad121cce2043bc46551247f2f88af76efcbc8f3ba5053a820439d0383342fa0728","ssdeep":"","tlshash":"5e511f3506b31521036b206c3babe316b23ad2433548f5457e9d93015f45f79d9b2bde","size":2492,"data":"","first_seen":"2026-02-24T14:23:51.4869Z","last_seen":"2026-06-03T04:20:32.028973Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/tr/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"73b8b49b4f5dd8adfdee877cd58546f0","sha1":"9f41caaee4b514ed017a6258c4a2166e6df5fad8","sha256":"b8ac084bd8c078db89ea019d31398c712a77cf27480be3b2aaaf7754615679ad","sha512":"b0dc33f21d8d930095dd34608c4cd501b4cecd139e1854fb636bb4e0d1722b22bda57425ebaf257860fc364a6ed9935865d391026a55c36bd7cbad695321d11e","ssdeep":"","tlshash":"6e4120b937867cb200f96633d6af771734f5d071d4018c10272adc896ab9d6a41a7c6d","size":2178,"data":"","first_seen":"2025-12-24T22:39:16.422871Z","last_seen":"2026-07-06T22:32:47.099131Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/tr/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3166d5139ebca4976a7df164026ff20d","sha1":"d7405b66cf00d1db4dc3140d6b1c63bca60fe4a0","sha256":"b297727d234af0837389b8bcaa1e72f4d0b62cfc126a4b9bb76201c5a52755ad","sha512":"ae0db71fd045eb0b103fd15902be9eb9a72763fc8494c7eec08ec13288bb0a46f320674f46a6467ba33f3869d3c388f15a83342bbf86aa38ef1810ed930d046c","ssdeep":"","tlshash":"4390024d71877261454126ed546a1016d3354480561c0113a7010081389814e42a5b8e","size":52,"data":"","first_seen":"2025-08-01T02:35:18.735752Z","last_seen":"2026-07-06T22:32:47.104782Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/AppSettingsButton-DUXAWyLU.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dc6a01a893c34a75e817f6a146527a7","sha1":"c1508cfd72de79f9ec6e7410de3069045e969b1f","sha256":"54960c5461d7c66aba31a344c54b5f248eee62133bb065ba8e24534cf4243f1a","sha512":"d1ea3f97feac40411a749ac6f282f5cbe3d29c7db0b54dc4dca77ccce3669544cf7bfaa25e7711e1e93af9cb0e68ca471a1d95791a9300765094b025575840a6","ssdeep":"","tlshash":"fae0c08790c1d3fe03d12ec1d60bc1053d166c7cc788a95240acb4617af41c6855f62b","size":386,"data":"","first_seen":"2026-04-30T19:32:29.896626Z","last_seen":"2026-05-14T23:49:57.356702Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FavoriteGamesButton-Bxkpo1Wf.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c47f765935dd4ca739421411271e4fd","sha1":"b934d39fd6712be2d9e472f64aa83567ab19b0aa","sha256":"d1277a6bb35298b776e3992e0aab5b30d954719f7b5625150f599409c29a56f1","sha512":"2d53a871ebb831aa5dce3fc74993af3f9541f0aa4cfe2fc3a570c975acbc6e9b9830ea35b840dbbd09d6d711f052d8bc145510a9fbf3e67b0bce27cc38769733","ssdeep":"","tlshash":"76e0a34ad088d2f927421a902607c0142826a47cd79cf49040ce18543d71457895e92f","size":428,"data":"","first_seen":"2026-04-30T19:32:29.888178Z","last_seen":"2026-05-14T23:49:57.393406Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/CasinoJackpotPools-oN0RIPj0.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cf1cd20992193f4d7c1d2769bdebe157","sha1":"9f0328ed65111fe9ccd1e0730fd650d1b08e9026","sha256":"eb42d74aaf4732529c41541a793c5d7c0a8fbf4e207e6d230e2f4285391f6ea4","sha512":"98bceae736ac34380ddcdf2e6638efc8ebb08baef5d46db29a0b6323da354255fc92e7e8fbf808f21f46739de5136a80791b4e67974b703742c9e8215524a589","ssdeep":"","tlshash":"3f110e8bf02ae2f8d5dc08e080a4925b073e2f38f65042c0009c1a2d96b280af679b81","size":941,"data":"","first_seen":"2026-04-30T19:32:29.798296Z","last_seen":"2026-05-14T23:49:57.448384Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e696145685e1c508e281ca647777926c","sha1":"8d5236cc82c26b776532cecdc2fd39240fd01af3","sha256":"12f451b3744e0d6ae02c419c5a014a0459203e65e9a837b08f3e8e9de5bc98f5","sha512":"ff5a3a136fa62fea0ab409eda8dfc2a774df3133c6def70bf34dd6cc7f072c9b6a5a202a56f12aee989afa5d08ae295a7bb62bcfef8037c4071aacd31ce43250","ssdeep":"","tlshash":"db2154d81ed2c1b765a7a8cf0ebb4d80713559876544cc00bd5c9d412f88a0d0ae62d4","size":1240,"data":"","first_seen":"2026-04-30T19:32:30.027314Z","last_seen":"2026-05-14T23:49:57.555609Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-08-10T11:32:50.303112Z","times_seen":78336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FastTrackTracking-DmVUP1HR.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56377ba0e97960fd1a4d140cb62f1185","sha1":"d67bbe6159a30c317109e9bdf7307f5e7578af85","sha256":"90d67f8259fc2e66a67ff2b4b6d3e3938d36818809dd64fbbe031d84fd5c82a2","sha512":"061c6a8987ce7544330fb0365c5820af1d11440bec1f1a7286e4e5071e8f9b506e0ea4cebe0133604241e01963f62744f1c2e841137f32054b60bdb6e101b55e","ssdeep":"","tlshash":"0921110f80f482f97c900e4e63e7e2a0957e6579702dd4a3f17a0bbc3b1c245939a897","size":1386,"data":"","first_seen":"2026-04-30T19:32:29.944889Z","last_seen":"2026-05-14T23:49:57.336012Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=m.galabetl075.com\u0026t=1778590245288","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a1e9e7adc4e1be0ee2fa9d7e91389de","sha1":"bbe54f207674b4bd4436752db30dee3c651f21da","sha256":"7fb314f12d37141afc65627ef4a6c93d101c1dd92b2685bc2f5c6834fc532b04","sha512":"ab79654d0bf0b6c2fd48d439156000540982cbfba365e1cde0050643450da03526ae4d51343cef8398b976ea2a944abed454afbea3079d007b53ca1f9eec57b5","ssdeep":"","tlshash":"d251a6d7b450e0c5638e8ade1d3f33c6e6b6d87a1e960c0d6324b6a0f949922d36513a","size":3043,"data":"","first_seen":"2026-05-12T12:51:50.980133Z","last_seen":"2026-05-12T12:53:29.769001Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=494052","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed8d0ebf4cd25bbc172c889583e4ff02","sha1":"b7306e0bf126e2b4a30ac610e294ca47888f0cec","sha256":"723efc713c285ee282fc5bb79f8ea846f0cbbca82bd7e09992a5b910254ae803","sha512":"d63397864ff0f6314e77643fb25eb18f268b94c1bf1714affd1985f92d9039d53937dbc9c771d1cf26dd1402cdab9361f4d87a1ec2266a51d48bc6a447565faa","ssdeep":"24576:XlujkeYV3lunmj3+FzO6EgkVIdTzvIKUKgbx/sQluirm9d1R7Ebt:XlQkeYV3l8mjOFzO6Egked/vXTgbx/sw","tlshash":"07157c9072563434c37795a260fe0509733d5b036806c6d8f2bc99992fe7c9a62bbb7c","size":956394,"data":"","first_seen":"2026-05-12T12:51:50.968033Z","last_seen":"2026-05-12T17:10:48.538027Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.DoTVWiIk.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"51631d2332e1df22d82571c7e946e0c0","sha1":"17dc0cfb8cc2f12c0af7317249f76d7bd42a1d98","sha256":"0c00564efc472ac5256d4ecd6da6b6160b3e5caf3df20225417e0f3a55fbbfe6","sha512":"eadad76d853cc88d81c9172cb859270862192812b48731d6871fa3d2722e266936cfd9c40578f0cf2ec6bd4903b599597f7407e7d04e03e94b79d017e7b9eda5","ssdeep":"96:HHW1MDMDY5x1pnq9kuOxmPkkXFcQCux3MpfR9xllUSvnVDtPVWFt6ida+Kq92rSb:nW1MDMDY5x1pn/mPkkVcQCFNl+SdDtGr","tlshash":"52b164cd37c170b756b7a0e5087f9006722db5403cadd410c224f8e57e6aceaa1dbe2a","size":5298,"data":"","first_seen":"2026-04-09T11:23:51.371548Z","last_seen":"2026-06-16T08:53:49.903318Z","times_seen":5241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galabet1074.com/configs/d212f7f1f16e55d50593214ba05a0f99.js","fqdn":"dataspot-bucket.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"introduction_type":"scriptElement","is_inline":false,"md5":"c502cf55b2a3f78e648f2bf2b2eb6582","sha1":"cd87424dc2922aaedb4d7418e581a1419e8ae5db","sha256":"24f898e9c39f054c6511010c44744db4702dcbf9c75ae5cbacbca2fd852f50bc","sha512":"ae83a469460b683155b1c51ce1309db2b9324f146a6274fd33a18d7b5e2f6807baa4c9d049ae330e03917b4bb85ddaa33122250a7e286aa541fa0fc60cf7ad97","ssdeep":"","tlshash":"0221e49664d8bf7706f01ef8e3156a48b4567f487031c849529fa89d6c214c24579f8d","size":1150,"data":"","first_seen":"2026-02-24T14:18:16.940585Z","last_seen":"2026-07-06T22:32:46.912147Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e6581","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"216.58.201.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e0b0da0028d1a4906c2640e1ed57c24","sha1":"fe256d873fc482acb13d2579b6505ebf3c1b8be0","sha256":"4929e3ceb5a803ff9e7d3a1612512767e30ed7024caaf6ab24476a6ddbb4492b","sha512":"f596573a5056d1ee7944edf2a933bab97a32094c09eaef40c38d8fd5142e93e61d67ed36650a157d8beea89a71b01c3f8e3550770a4564b3ffd82bfa31a6293e","ssdeep":"6144:dLqI1BsYCw1ou4wa+WhSom68/91XD1Chgan5UAyb:RsYpou4wtRwga5Yb","tlshash":"91a4e6cdb3d675625396f478903f018ba57b28a2b44cc89af189cce42e7465a4237f7c","size":477056,"data":"","first_seen":"2026-05-12T12:51:51.227297Z","last_seen":"2026-05-12T17:10:48.686593Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/JackpotPoolsWidgetContainer-BUz-kRPc.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf7b58f8370f7329da0964c7bcabfacc","sha1":"ca8256a4f7e2376d470e3616aecb9c8abb0f7215","sha256":"3358b36248d1f7383e9d561ad9c1e154e9b2dc78f6b70c8292c289b6728ad084","sha512":"698156f65c85bda85e617bc9d3beed4797902492e62b1348f5f076968adc035c86bcdde8e9c6017af9d7b63f33515af19281348e82e9e84160c6c6dd07a7c7c7","ssdeep":"96:k0ao/CpTBeLzTGNlTw6YakmD7+oAtPeY8ORtTzT:k0pBME6E4yoAdPPzT","tlshash":"be817417e01ab3fce8ec04e3502f910e367e0bfdd75605e8d0ae05240abd859f259b8a","size":4123,"data":"","first_seen":"2026-04-30T19:32:29.889626Z","last_seen":"2026-05-14T23:49:57.346096Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/useNotificationsProvider-D7YdiWNv.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"76fc29f31098733576f3109dc08bf01c","sha1":"d154589364a17678c17f5b21dcd9b7c7eede5ee4","sha256":"8e77528d96b5132ae9306a4a71b205dffcdb013e82e5e7e5c9ca4ab9f745a63a","sha512":"da7f24bc5adb5bbf5202a0ff224f867ef00d661344f15ac51b8bcd8365bd9bd56bbb0e9de3d56b795b367d7b24591c2f1902863f24baf95ed6f2ddde347adec2","ssdeep":"","tlshash":"8db0123318c003f022020cd8011498290630083c3b918ae00224920c21e9099830fd04","size":93,"data":"","first_seen":"2026-04-30T19:32:29.720769Z","last_seen":"2026-05-14T23:49:57.374863Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/tr/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6f941adb2ce1c3c336f01b65e00b5b9","sha1":"225bb5c32199edc5a116b0b6108c4e5308b28e58","sha256":"3131d130bcb57e9c2593c009769729464af0ba726b8821274bcd76e44e283f56","sha512":"995db58cf4462f52c3f124666f58d5ad9725f77b17342864521087a05333bc53a776ce1c8d2d194b5c5880ee09b72f31aeb536258aec48b96a4de62adcc013d3","ssdeep":"","tlshash":"9011147d3ce76848d60e9bfa356f978d20b7b8155d40cd90c189c498a555fc800a5bbc","size":926,"data":"","first_seen":"2026-03-07T12:53:25.05797Z","last_seen":"2026-05-22T17:22:58.364344Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26d5c6e9eb5b8acc5d7f0a4acb0bb17d","sha1":"f28c859ece3ceabce922bbdf6272f9f7e826b783","sha256":"8ee1aaf2ad1cbca21e0581993206ba9ffd736c611beffb7287581a87cab67ff3","sha512":"388bd8e7a24945d1a3db30cd4cc03f006d5222f5b399b6578eaf9f87707fefae25b423aa0657dffd191f980827742165f1cfe7577a899ac63ed728bdd9886ee0","ssdeep":"768:IAObYQP9MBTSbyDRP0aubWc+ZdLyiQL96+hYs17eFCgt/oJBpntD/PN/xd0MpIJ4:TQP9MqMZ+vCBF/g0vmBuNfftrcuk","tlshash":"8fb371c8f6d6f064439764b4803f510bf23eb96e680e8464f266dad26c7899d9133f78","size":108916,"data":"","first_seen":"2026-02-24T14:23:50.976435Z","last_seen":"2026-05-22T17:22:58.310306Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e6581","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"216.58.201.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30b0dbafebd86cea32ee7cc4830de0ee","sha1":"11e5454e18001fab895164bffccb75bd2755e50d","sha256":"8b0803a487a041e26386f2f34c3177d832420d1a9db344cd2f1d2c28b1af958a","sha512":"62aeb0de2e7f2b4751e203bb3ae4b138b4cba1106c5a3589344b6b1c5c2150c6c51e2bb0c01b795649f27139292113059a3a516c99e728e3fda50faa4298eef9","ssdeep":"6144:dUqI1BsYCw1ou4wa+WhSom68/91XD1Chgan5UAyb:IsYpou4wtRwga5Yb","tlshash":"aba4e6cdb3d675625396f478903f018ba57b28a2b44cc899f189cce42e7465a4237f7c","size":477047,"data":"","first_seen":"2026-05-12T12:51:51.118398Z","last_seen":"2026-05-12T17:10:48.610575Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"93db6ecbf954ac573648d89ca77e06bb","sha1":"0d411d0ccb8964ffa466a11258030e2a175eb2aa","sha256":"8a67acafe4f1a37f03bec943602023f11ca9bbac88a55c5a7f1235442f84e8c7","sha512":"5986cd46a1f26ea6cdb765749e6c9a2947dcb6839f0664f46d96846f091272e82eb9f515e5686d1b7fd29c6f458b613351e5cbbaa81148b60c9096b6c82b4fb7","ssdeep":"192:AkC2WszNVI3Dg+C7VdX9kXjLMAOghWH0I/12HyijHsf/LpfM:MhKVSjLtOCI/1Iof/LpfM","tlshash":"b1e1442f416113298027dd6c4bf4a7078278e8667c6d77e929136729d7cbb4215e328f","size":6976,"data":"","first_seen":"2026-05-12T12:51:51.279935Z","last_seen":"2026-05-12T12:51:51.279935Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"m.galabetl075.com/assets/events-CJzlsMH2.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/events-CJzlsMH2.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2036\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=moY52KR229q4FGon53tTLRFAE2aAbIG8OXNy3gwhWF06CBLkFAsDOmx3XBQ5qvPfjQB7FseFfy2u%2FqgPOtyAy49YGIX9eZuGDJckcCJ%2BCuwVW3D0W62N4f1flKvZknlZPaJVUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cff9ce556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6142,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6140), with CRLF line terminators","md5":"40cd86acab69007856aafa75fc5d55ef","sha1":"16816e82e5dc5d9b1bce61e7b2184df00d5678ec","sha256":"3c4cc32c6e1beecf75bc446aefe235d58fd5583675ec76da6f7ccf1f83f8a5ef","sha512":"cfa241efa598f94e100e60198784b45f0e5e64b8e5394f1d4f670bdcad73e951705e03afc719fd239f7e2ccb059d327c9934e4ca3fad778302a9d7d3a5626df3","ssdeep":"96:ud9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqK:u3IM2sWMtBq6n3PzK","tlshash":"0bc144ccb38574b013e7e3abb07f520bf134a598740c5108b61aecf9696bd9e4126b78","first_seen":"2026-04-30T19:32:29.831521Z","last_seen":"2026-05-14T23:49:57.48702Z","times_seen":6,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/getLiveGameAdditionalInfo-1e_kccjA.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/getLiveGameAdditionalInfo-1e_kccjA.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 557\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pGwv%2Bv8ghyzleLerrrSZiku7vvrcxEJXDRqzu9PzEg2xSzTR5fWr7nFxjjkrwWIxaGvTwDjpTNo5pSmcXn00g7hpEgQtgyKvkSoLLPR9LLpBPNY%2FuXTkDbNnwsYS%2FmaDnu98Uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d043d6856c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1151,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1148), with CRLF line terminators","md5":"82f139f8c40ab08eac77e7b49301341c","sha1":"8d1f84bc72c0d8e92b2b2d670856cfc262672552","sha256":"56e77d237a0ae4d5b2966631ce43e483ddbe65136a99fc43757bc9301009a738","sha512":"13836810b57c9f0b29882c3ad111bf1208ca2a27deb5690f7981379b05abeafa9a4d8b2b6a989289ac33c1b2d2e19dfd2097a66261d675d95e38912f9071f2c3","ssdeep":"","tlshash":"632144b270ae92bfe5c94c9457b01b31a2b1ba09380445ccbb3cc91928774c4a7e2039","first_seen":"2026-04-30T19:32:29.789826Z","last_seen":"2026-05-14T23:49:57.396307Z","times_seen":6,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/css/fasttrack-crm-app.css?v=bc48296","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 06:34:08 GMT","end":"Tue, 23 Jun 2026 07:34:07 GMT"},"fingerprint":{"sha1":"6A:FF:CB:88:7D:2C:21:DB:DF:9C:CE:23:37:4F:33:97:B2:66:83:F9","sha256":"D6:89:30:57:7F:09:DC:DF:2F:F6:56:BD:C5:FA:DD:99:4A:6D:A6:D6:C0:95:94:F2:71:EA:ED:8B:67:DB:6D:46"}}},"request":{"raw":"GET /lib/css/fasttrack-crm-app.css?v=bc48296 HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 14 Apr 2026 15:09:36 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: KYO5WRDjjhiTCKDvpfQiocpWlm6aZ2Pd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ORGDYDGJ%2BB%2BcizxDin5JDUOB9nFntLOrasJJd%2FJOVuH%2BO4QdyY%2Fp7fREG1R%2FW62T6EHHoS7cU78ejfNDdsbl9iSXxrMx0R22gOaDX%2BLSLRlmEZtGds8agd3aY4GsVVvULgxGlxmpkQszib302Bu0zHk%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 50Ogp7sbUGJxuxhg_33ap0D-IlkhQqTozLDoHXyAootj1JO9kGjFoQ==\r\nage: 321\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"7906aada543698dba1005a917ffae2a7\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d0ac9e4723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27953), with no line terminators","md5":"7906aada543698dba1005a917ffae2a7","sha1":"7f00d6655894909587fe280ebf09bf57f66b4100","sha256":"5e2a69854668603fcd556f0b8a3da306e3de6d5ad4dee7a9e9a57ca998269d76","sha512":"262f19709cde3e7abb7bb6d9724437b042fe626636083b80376e35a91d1ea9b39aec82463626711cb60a8c516a1b909d53aac644f056e77929e736fed6d1706b","ssdeep":"384:cFukqharVUf5rKbHWkAB1MG4TmpcHyH3XHZw/XNPalHfI:ckkqharVUf5rKbHWkAB1MG4Tmpc+J6aO","tlshash":"78c2442302c02288ac2b892b73d50599d93ec836651b6dedd7433955c7cb77e3a6b34e","first_seen":"2025-10-24T22:03:16.572036Z","last_seen":"2026-06-19T22:22:48.441807Z","times_seen":146,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":59,"dns":1,"connect":3,"send":0,"wait":42,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"api.livechatinc.com/v3.6/customer/rtm/ws?organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026x-region=us-south1","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/rtm/ws?organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026x-region=us-south1 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://secure.livechatinc.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: z/1twkg70hHS9myHT7XNKw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nsec-websocket-accept: 5d5iUavHQBzG2Z91pPIiCqFNcj0=\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://secure.livechatinc.com\r\nDate: Tue, 12 May 2026 12:50:43 GMT\r\nUpgrade: websocket\r\nConnection: Upgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":148,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/Promotions3.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/Promotions3.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=M4mboV48wyuOKEHzeCIU7oOjtcIw8HsahaHXKFEgSvw-1778590244.1339622-1.0.1.1-20eprHZYRBIhr6WQYlq.zEi6BT8bdeUjiQER_m0j2x0eqE8SIGFjJ7q9LTVDRty3oYSexgGChCmTJ.gHm0HDd_S_zakVOyhz9vZNjk0oTBkbhLH4GCt9KpQz_aCgW4Jx; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eHDS7kO0OJK5AGCzT4LtHTCjyB6uUffxefXwSYbIkgf9O%2F8cToINMh7BMT8JS%2BtLyBvutamP9RlFWqfYWJV9tjQa3y%2BlAWltHT%2FNlixoO4CeJ7JCWm5xHeNVGsPzfENYkuA%2F3t4iBzM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627085-710\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01caf7b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60e5a10a5bbcc415db7edd6ea60aec4f","sha1":"65af716c48e21ed7c837e77c4b7c3e2f33205dd3","sha256":"a8c1d1768e9efff44b10ffebd02cb4959af6be79610cdc02e44e840f0ec39a28","sha512":"418d3b818cc59a64f5261e2cc27fa2234ef1bf94a886866217d032d211c2ee47b758410154acbb7721314b855778c3e6bbd73fd57fdb092c5703c9270796ed22","ssdeep":"","tlshash":"ee312cd8ee305570eec443ffab118988795614bb69328edcf22c83886b8390800288d9","first_seen":"2025-07-08T10:50:27.664088Z","last_seen":"2026-08-10T15:32:58.707717Z","times_seen":686,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/TabItem-CBgyJEAy.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/TabItem-CBgyJEAy.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 244\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6YXF0DOHEh9Q9HQ%2FwO%2FIdj3mGPGnhdowOeW9qyy9C5H9513VYp%2FJ2lgpdRCa0EDr3%2FpH%2BK5dwpLY39PX8toHNhwUgjd3K7IQgWFt0xonGPCE%2BdWK8TRJsa5B8uKbaNbyKmXF4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d043d6156c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":424,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (422), with CRLF line terminators","md5":"006315b1619ca2748ac3d5e66519219b","sha1":"6c3a32e0471cefebb7251b9bd5b32dcef39d3284","sha256":"6ecd2a161d8c7f3bbd34952d45890e770154110cca07b57f207839f3d1a0a6ed","sha512":"3541d01c403ebf5d686c2bb70963c8149882a3788c59d4958075dc4325cf500f3be081e546ccf268f4da6adc3ec76175472ecaf9fbf662c31c03d88bddb11925","ssdeep":"","tlshash":"ece0ab52b010f3f9982b44c2d27ed4c736120ddcdaa688e1e0a22044432e521f78ff8e","first_seen":"2026-04-30T19:32:29.909004Z","last_seen":"2026-05-14T23:49:57.337328Z","times_seen":6,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galabet1074.com/core.js","fqdn":"dataspot-bucket.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /core.js HTTP/1.1\r\nHost: dataspot-bucket.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=R26qzShb0PtPCA07tuPmO5D5TsgsgctX.00xfXIQNtI-1778590245-1.0.1.1-PapueOrYcE02LERxBIemitQKdz.fdyaBmqNKAPnqD0y0wi3WJIUL669lSRS9euTr1PcxIzZtML7m4nihWw2YEY_bSbhpyeeamFcM4p0We0s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Mar 2026 14:43:56 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 12 May 2026 12:50:45 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ux0GRM2Of64rrRN%2FhL2JHKhVX81AA4%2F68KCkV84cIPOFNTyVVvUU%2B71MCQhEqMPy1X3zlNnbzKXDrvENRuFRzgG6Wf7tg2R47ral3M1Qk89TDbWx5PkuT9eQElX8%2BRRlEIdGI4rKI1jrTlyhzr3Q3thJ\"}]}\r\netag: W/\"69ca8c2c-18641\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d0a4a9356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":99905,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"048c1b8465da207ecf31bd8fc2a01c46","sha1":"17a7c7bb7432d7be77188f6bed0e42dff033e540","sha256":"bdd193789c9a7d8c3f4159b796da5229406884e4c2aa269bdf58a7e8ce4f2882","sha512":"1a4ed5eaabb66424d864c5719aa546f8186eb62d7f9e8470f2ce57c7c2680e89d02be11560d1f5de4669d61de39ba3a0f8b1c8fe16817c18f389299d3f4ee194","ssdeep":"1536:3p7FZqZWm6P+GgMwnm0mO2xiDvhIbq/Z3qDPA/nh:5qZYSmS2evhIY33/h","tlshash":"44a35dc5b2a164f083939bd1d4710253e32c6865390280dcf7bcded66f299cab166fb8","first_seen":"2026-03-28T16:05:39.610024Z","last_seen":"2026-08-10T15:32:58.79564Z","times_seen":54,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/511.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/511.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1372\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 07:23:15 GMT\r\netag: \"99b87cc5286dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wx3yFbwO5oAjA3z8D3PJXMAEhWNtrvgGqrSvRK7WdZu74fErBRLn24Z4wH9%2B%2BMVVQiyK%2BqKHVUn7vaqpBhY5t6JMdVdtGTF42%2F9M3GyGD9zocPTHDSfxwFYO8uRCcHGHtmuAUqNcusQBk4YLJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7e09120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1372,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"01d0e7490f307a35475ae7b6cf63b06b","sha1":"7f8a5d8f06aec54d76dae867586de066a7c34387","sha256":"e667284d161b8f2b66bac203b96e81d395bb9fcff8fb5e303040e1b513073aae","sha512":"cf734262c56dd8e6850f2589f9b943994e4a002d755f6c49a2d368f9c9440082d0b79703b2111dfaf5100ccf0226c579c887b0675dc2c87191c343dea25c27f9","ssdeep":"","tlshash":"db21b6da18cd2cbe0d6714793a43957200a6bebb901aa416fb01833582dbe290495245","first_seen":"2023-12-02T01:31:51Z","last_seen":"2026-05-23T17:36:46.447616Z","times_seen":153,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/1/2016.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/1/2016.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1498\r\nserver: cloudflare\r\nlast-modified: Wed, 09 Mar 2022 11:30:47 GMT\r\netag: \"4230f1fa933d81:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ueJTo1lgWz87mJCpve94snhCNzav%2Boy66UBVt6YpvaQz4ENoAmHDt6GzoveDrTZeSt8LfmFaYI6EsfhSjLdhKMVfTMz%2Fm2%2BOzsOdmRYpTHHDYoWPHudTvuqzaozP8Vs9doCwjPJ%2BZEA%2BGGCb8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7e0b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1498,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"993566fabab983d3a7e55f840d9a247d","sha1":"73881adc372bc9421cc30973a3260f8dc8917d5d","sha256":"6262ae01bee75220054a10f58902a09b2bf78b370a1de2e30b777bd29cf5c4c1","sha512":"7e231c38a30d4f7bde80ca7f6cdbb75e4e969794d749ae110f297efa3afaf9f9704253286bb0a9f6f1c15498f964b6e1f468b81fd288758ca01a1d12838eae5d","ssdeep":"","tlshash":"4931a7a5729d59389e9c129b01974f8124f33ff76edae275c438d51ca01d2acf195063","first_seen":"2025-10-20T07:10:30.799527Z","last_seen":"2026-05-12T17:10:48.403788Z","times_seen":17,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/fonts/default/Roboto-Regular.woff2?v=505","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /fonts/default/Roboto-Regular.woff2?v=505 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index.C0U6OaZb.css\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 09:03:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 72024\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPEWP3KEQuLyZlwCzaTvUHZHvpFVsaWBrFfpQGu1jOV1GeVfAaHZ%2BuPn72bTChQK6bVvxfrIX%2FPfctVq76SbEkJNQaXrr6f9uuOUu2jane1EU1YxeeQAGX7x9aiati31FUvUBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cf93c9e56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72024,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72024, version 1.0","md5":"30c281e94eab37286ff7770f3e51858b","sha1":"7a5cc673f005e9f384e322f8fde4795b0f750778","sha256":"c4a69a0b671392fe569ef74b4a59e0d2e769837ae59beb3944ac72ea240912c5","sha512":"d5b0686a2dce238f2c825169a19f0425fccdf6fe2d6d4e3704a02f618ea96bf1e0827c158b63b221dfd1f35094f4a420abab4ebf984f9993c6a080ea44b3d2a2","ssdeep":"1536:Y/pXAWA65c5JbaWR/9Al5ceizufFxY4lcWVZGDULZu8uqO1:apn54BREjCuvY4lRaK1uq8","tlshash":"3e6302c4ae4f1bccfd67d5add8859e6a1b8ef1b09320106de3119721ef4b403b3692a1","first_seen":"2026-04-05T07:31:10.87701Z","last_seen":"2026-08-11T20:15:29.032202Z","times_seen":467,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/favicon.ico?version=1776759160364","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /favicon.ico?version=1776759160364 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:42 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 27 Apr 2026 09:02:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7004\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvURGEDlNKiV4V8HT9g3Ig%2BWL4iESW8iEehMVqfZ0nPLRnfbUFU%2F2G8wGFJ8QR%2B2bb%2FpFIhnIWSObsdBOspd%2Bs6jsKDuOYUdbi4x38R1mmgb%2Bmmvqk6UE5flcLYcvHYp%2F58M9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9fa98cfb9cb556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7015,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"96a66de67adef28337580739eab71404","sha1":"2b93f9d9f5ccb809e454e812f9dfa7ce9ab02b0a","sha256":"1b029ff1969f7f867742ed30370ab8f76f58f3a00c102b51740cee61a5bae6ca","sha512":"efd763159644683e2aedb05be3a541cc4792938d3755e0b0a1e8850c6240e04c3ce03e465ac5160ebea03b7ba0e9a948bff584fb163ab1db1677453bcb13a7fc","ssdeep":"192:AA9risdBVS6QwidYsQ6ujzwAzxyKjuDqc:AA9pORYsKIAz0KjYqc","tlshash":"40e19fc31979540617e9f2df05c4386ab74ca88793a2a4f927b931343ff19cda613229","first_seen":"2025-12-24T22:39:15.963833Z","last_seen":"2026-07-16T16:07:12.998292Z","times_seen":119,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/localConf.json?v=1778590200000","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /localConf.json?v=1778590200000 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 1364\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ManKSQGnWeJd6kY7XEqYnsnEF%2Fm%2B0rAxaPLb0qLop8ja4%2BJ%2B8%2BxW8PpIU%2F6SH3jOXfnOMXoVZIMaiGGQvTYomFLtkUzzXQEMrOHXN5A3h92EH81HeUndP%2FDZDKR6oa1mBg0LQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cf80c9556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4471,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b406e9c7fcaf80e5ab91f27ea0f0294c","sha1":"54ddf99952cf9b0fabd829928125026af457240c","sha256":"a327cfe81199467e7773a331449db596ff5a5da012ace64d4ae1889c757bdf15","sha512":"50bb2149cb4177578ffd52d275d2f399922cf5dc4fe93ec9e32b840532d1dc7cbf148a136fc965a7e353fab249d5849f33dba3146a47b9f8053a574661b71f4d","ssdeep":"48:YuTyTbGhzyQnA8qA+9nIok/we+NPhwxbwPAjgCfk/wWp3Copi279lMFDQJSLhHan:xu2ByQA8qAHTwAsAjgCuE56szUn","tlshash":"7391cc9d31458cfec75eeac3788b679f3042811387982c06c27cef4c5676f19650a2ab","first_seen":"2025-12-24T22:39:16.189594Z","last_seen":"2026-07-16T16:07:12.928095Z","times_seen":87,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 19:45:24 GMT","end":"Fri, 17 Jul 2026 20:45:20 GMT"},"fingerprint":{"sha1":"55:E2:30:E2:B9:65:08:8A:5E:4A:A1:AC:70:12:E1:69:10:5B:88:0F","sha256":"34:8B:B6:28:AC:C0:28:44:34:51:7E:85:03:E3:50:1E:04:E7:48:B4:99:11:CB:23:AF:24:CF:9F:63:C2:C6:1E"}}},"request":{"raw":"GET /turnstile/v0/api.js?render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/b/883a1f27d85f/api.js\r\nserver: cloudflare\r\ncf-ray: 9fa98cfe7bcb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64227,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-D5EcCQyh.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index-D5EcCQyh.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:13:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 39027\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TUMahkJ6nXHlwcWhmeikkQDw9HjyJNCJkoSQBKQ1SAXXz06NKzOfagpdo6VJ1DtVQ%2B0OrCYdPgcACn83AZCOHDixh%2BrXj%2BABtB33bm2KQA9gF4kDXXKetDG12MJzVZVoCgShDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cffbceb56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":157557,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7a1be255be1f0ae59f0935129d64aefb","sha1":"951336661c010a2352a00432f4804365f8adc748","sha256":"840ce35b91324a5d62861bd2a583a2fae8cb05a344269a57e827065680726b66","sha512":"e5227a276b6c7d284e81fc14f3828a951668e71b5e46d06f42335923bc870fe14420823f285c17e988d15a45efdc169ec27f50284e2486f9f1854a5fbe19491e","ssdeep":"3072:mrwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1Fc:WwhFHU4HNwFH7MoOWexZFHc","tlshash":"54f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-04-30T19:32:29.92888Z","last_seen":"2026-05-14T23:49:57.306857Z","times_seen":6,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/if-defined-CWaLTnLW.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-D5EcCQyh.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:13:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19489\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6snoYyC6Zzi%2Bh5G4O6mvIYsuJ8iB3pShu00QVij0ILwqam7Z1XL%2B39KwVG5GCjrpGTvobLJpXKMy9HGM%2BcwpI9bNJIAwFbwivrOXpdmqLtb7Vxhok0P81ewp7i29YLXfP99hWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d033d4656c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":53295,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18566), with CRLF line terminators","md5":"11916cc7acf39a179eba86fc2f2b369b","sha1":"69a4b182f97a708c1dc0d9c1a5c9775c6376a57b","sha256":"d59e3142307919a3fd08dfc1c3326f6004432b617476c354ea2ce2af30668c48","sha512":"6603841b87172a020a2e0727faf1cc3b0e3c03f7cd6aaa401e1a72ca0b6503c41b937ee3403a8908797ed56f247f49d0e33a6bfdbc9390b46e2e8785230d7389","ssdeep":"1536:XsetCKv9nc1kM27Eitmqog9o/LxGRbVkTh8TEr0oGS:XVgZg9o/LxGRbVkTh8T9Y","tlshash":"ee3308d472e571a243d386e5843b001bf3757824382d846cba2da9db7c35a4691fbf39","first_seen":"2026-04-30T19:32:29.82386Z","last_seen":"2026-05-14T23:49:57.399754Z","times_seen":6,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/JackpotPoolsWidgetContainer-BUz-kRPc.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-BUz-kRPc.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1642\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vBcT1q7RzgpPzSlVPqJDEMilRYqoHhV4jmbdicLvlKxkFr8o1Y%2BC1rpKjSgaR%2FLWEk0JX6zA02jF6NFtfmgkjX44OfMst1q7eEpoP5WwHhc%2FhhxEIb00hdC4hRzODswhIt9awg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d041d5756c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4123,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4121), with CRLF line terminators","md5":"cf7b58f8370f7329da0964c7bcabfacc","sha1":"ca8256a4f7e2376d470e3616aecb9c8abb0f7215","sha256":"3358b36248d1f7383e9d561ad9c1e154e9b2dc78f6b70c8292c289b6728ad084","sha512":"698156f65c85bda85e617bc9d3beed4797902492e62b1348f5f076968adc035c86bcdde8e9c6017af9d7b63f33515af19281348e82e9e84160c6c6dd07a7c7c7","ssdeep":"96:k0ao/CpTBeLzTGNlTw6YakmD7+oAtPeY8ORtTzT:k0pBME6E4yoAdPPzT","tlshash":"be817417e01ab3fce8ec04e3502f910e367e0bfdd75605e8d0ae05240abd859f259b8a","first_seen":"2026-04-30T19:32:29.889626Z","last_seen":"2026-05-14T23:49:57.346096Z","times_seen":6,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-C7fm_l4S.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index-C7fm_l4S.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/WagmiConf-DUgl5XWp.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 58515\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jXcOdMHDRA%2BV%2BNJZa2o2GPitRFe%2FQk1Ph40V8K7GwkDhOyg7%2FJcodFSqhvLtrLI04SguyKGOWSOxe44IrT%2FPFLU0UkjMh9WKuB5D3cc5SnhtekzX24pWiAzRPGZCyUpIuDiN9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cff0cdb56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221193,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523), with CRLF line terminators","md5":"015f13f26cbd87b457e4ec6b937fa51d","sha1":"5c6191881f2972f8e8091e52dc22eb55a34b8588","sha256":"2913ac802b9271a39853964416349a15e9de6e618fe9d56f09aa471fde406c9c","sha512":"036b2422abbf2e6f1b0191550bf61e4163ad8472b5ee153cdbc8bcfcea65654f55a6bdd99bde39c3fafad7ce54de57c6d5c9dda202e74f0322dc2c5bbb339b8c","ssdeep":"6144:cfeB97084RG8o2O4YLIALoh6wjYSd51jXVvFaNIacDGRD6Oq:cmb7084RG8o2O4YM/jYe5daNIARO/","tlshash":"db240ac4b274b0a556e594d4502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-04-30T19:32:29.746144Z","last_seen":"2026-05-14T23:49:57.379599Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1074.com/api/public/v1/tur/partners/751/components/header_info/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/header_info/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 401\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nset-cookie: __cf_bm=6KwceosOgJ1EWdTQEjscQccokGYRgfIuVTxj.jvRLJQ-1778590245.0739129-1.0.1.1-oBjM4FPNx2BtsgPy09GwgYwOumleKquKV7t0MtCu0kV30NTY_P5XUnK0kgHXk5165rj7mD_en6LHuNSQIYSBXuwNe3dqrAILSaJroPJzQvoXam3zJmNBN6I9g.8wH5vB; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d1fxKsU%2FF6zkFi%2FXBTANWE3mD75cuFdalL1YGQNK4%2FBIoVgID7NNh%2Btra7ti09SvPEs%2Blb5dYyGCgjo3PICxCNHTTPuB2V0dmjhazDlfm%2Bw82Lr2uiCx%2BBGYtFzfGCnNEQqnPY40p2NA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9fa98d07b9de569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e78e8fe5e34355f98dbd1044e68ed965","sha1":"abd8ce10a2a42bf3fe24e8f07e842bec64725085","sha256":"9368f4dca2d352262ec3aaed5d700fc8010783ffc9c6b1fe447dd7dc3381a3c8","sha512":"be5188e532b0f6391116bda1d34dec654765002586df4477019a555dd86fd94b9bdd1574289ba15c72feb82a0833cbace58524adde285308a44843400fe65abd","ssdeep":"","tlshash":"a3f0dc36a72ec92067504290c04f383a185e028cde00ee6c999dc77044e83b9a1220a9","first_seen":"2026-05-12T12:51:50.950634Z","last_seen":"2026-05-12T12:53:30.102352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/NotificationsButton-CRcMibFE.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/NotificationsButton-CRcMibFE.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 349\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LV1PW4PeS%2BA6SfxJukMS0YGU%2B%2B%2Bw%2BgLPNdnThtg1PtxUwO52qWEftzmPz1TqCR2NHN7YbNsoRK9F7KQfRPzIlKV6wok1FU%2BNVnOdXuJU5jBaDuXr2FTMW5%2FqlUXg%2FjoPcHoyog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d020d1456c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":559,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (557), with CRLF line terminators","md5":"edecb46fb8c55da0a7522275eb1bb505","sha1":"299580befcfbde53484f33749d4da069d1365518","sha256":"a82ad2ef453a02afe40e25c07582d9ad7b90bf979f71d63136e0f0d037402212","sha512":"fbb3336004e0b299a6c288300bee290f1e2496f821743eaf3e8a27055a6a80b9e00c8f28b96b96bc07eccf35b10a9c68e49a16fa537aec038ca421e1bab319a1","ssdeep":"","tlshash":"8bf0208be998d9f41b820910b32bd015383ab83cef4a688000ea2c58233005a895f94f","first_seen":"2026-04-30T19:32:29.731645Z","last_seen":"2026-05-14T23:49:57.388904Z","times_seen":6,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/fonts/default/Roboto-Bold.woff2?v=505","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /fonts/default/Roboto-Bold.woff2?v=505 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index.C0U6OaZb.css\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 09:03:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74184\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zE8FAKcSI42fru5V%2Fcp%2BLfXLW2fb7TGQhCsUQVaQHylFdyYou%2F4a88JwouXjgQz9iUJDxzndJuHm%2F28cv%2B2mSY0xYctfQO12qR1xW%2B5MgdNxVyt7tCMKloC%2FRYJctjWjMu9jA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d025d3e56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":74184,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74184, version 1.0","md5":"b270a087c3e5691e8dcd9c65c47146d8","sha1":"eca2667e8e4bde8fcfb4f7bf60bbb173b253f012","sha256":"a263682614bc107fe67de6eed6bd2e02a7225cba494c307732bb237bd5fe2e5e","sha512":"7377ab397d9ad4f74c194429c95372d83899fdb831cc2d63b80d84898be9b14e6b43889470ac2b5ef017989e5ab1d3d24b74dd461c9781c83e14dc9ad37b7b67","ssdeep":"1536:0VL7PKKoeF5SBEVL8FqoDceu/+6ab00LtFbsCbE7pr:IL7PZnqvasb0EtFbc71","tlshash":"3a73017c44e03055ecfded5b329f20a3ca3863e258d59e88fe79099d1cb6bb8118b449","first_seen":"2026-04-05T07:31:10.868394Z","last_seen":"2026-08-11T20:15:28.978537Z","times_seen":386,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/events-CJzlsMH2.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/events-CJzlsMH2.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index.es-DtbtQDLm.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2036\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ak1szq8Kf9QUKsRLh9%2B1iGukKNlCK6VB09Dq4fDLYYJ6XMnabsz6c23z3bJPx5TAt8JiWjABqZ6K1u%2FuCJtkkRocBmEJARVg4SviJzyzMxIHESlnDNRv%2FoQzU7k%2BkNobE16boA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d033d4756c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6142,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6140), with CRLF line terminators","md5":"40cd86acab69007856aafa75fc5d55ef","sha1":"16816e82e5dc5d9b1bce61e7b2184df00d5678ec","sha256":"3c4cc32c6e1beecf75bc446aefe235d58fd5583675ec76da6f7ccf1f83f8a5ef","sha512":"cfa241efa598f94e100e60198784b45f0e5e64b8e5394f1d4f670bdcad73e951705e03afc719fd239f7e2ccb059d327c9934e4ca3fad778302a9d7d3a5626df3","ssdeep":"96:ud9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqK:u3IM2sWMtBq6n3PzK","tlshash":"0bc144ccb38574b013e7e3abb07f520bf134a598740c5108b61aecf9696bd9e4126b78","first_seen":"2026-04-30T19:32:29.831521Z","last_seen":"2026-05-14T23:49:57.48702Z","times_seen":6,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=bc48296","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 06:34:08 GMT","end":"Tue, 23 Jun 2026 07:34:07 GMT"},"fingerprint":{"sha1":"6A:FF:CB:88:7D:2C:21:DB:DF:9C:CE:23:37:4F:33:97:B2:66:83:F9","sha256":"D6:89:30:57:7F:09:DC:DF:2F:F6:56:BD:C5:FA:DD:99:4A:6D:A6:D6:C0:95:94:F2:71:EA:ED:8B:67:DB:6D:46"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-app.js?v=bc48296 HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 14 Apr 2026 15:09:36 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: fvxi.f9MCKb2jz3JV5VaJQagZR.MS86d\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VeenIi9Bo%2Fj%2Bsns1sL68AIoXxZfFiendP2my5Ypdng7mzHZ1eQ6%2BFyu4YbRYa1DGR2jfepAh58wQctzLL5gv2PhhgVP3jCyDMYaWV7EMfXf717CtT3xlYlicTQWIJatneHtHfE1K3fy401Lo%2FHc08UY%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 dab692ab133f98758992c9457836e846.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: LV5GxVSD5MzGFX1DPe8pwVSaYuckrNS4pxr8oNWBdHaaKz9iyOvVfQ==\r\nage: 316\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"7dbbe1a7d40a4a855e0411c1a19652de\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d0f2bd6723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":75126,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7dbbe1a7d40a4a855e0411c1a19652de","sha1":"c5af0f3dee6aacfb1b2cf8ad41c734f8039bb3a0","sha256":"7370b77a09553209c1fba44947bd713c2f8d842a282e296200398c4dd4c7afb6","sha512":"dc2ff9d25cc20706eb4719c0fdebc53267e7649d8a0d42b76d6a6eb96c4f0ff08b604fd2aff94db12a629bc08ba6507bb8a34cec6dd59bb42dbc5e002ce921ff","ssdeep":"768:HPZ1UbN3aQe+roEuPT38WwK6PhWv0Kh4y6QewkNzy2mh+slc38kCVoO4kB:vZObNKQe+UJPwHQe81h+slcCVo2B","tlshash":"1e73b78db1d2bae94df32021535b3604f23b1974542bd484f7acedd52928b0be227b6d","first_seen":"2026-04-17T00:47:10.101067Z","last_seen":"2026-05-18T20:41:30.756579Z","times_seen":42,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.xhyEK0_l.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/9.xhyEK0_l.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEh02gtLgGfg_bWWruaEvrbzcTJJRYsn8DbQbj4nLit3AD3PWzrKyJBenmPRqIRh9TNDxfwv9XU\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\netag: \"c96a39460d2b0a92409b2b92f3da88f9\"\r\nx-goog-generation: 1778587684446080\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 74\r\nx-goog-hash: crc32c=pjIEnA==, md5=yWo5Rg0rCpJAmyuS89qI+Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-length: 74\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":74,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c96a39460d2b0a92409b2b92f3da88f9","sha1":"c1ad7e3c7f38743ebadf589676726dad6799a9d5","sha256":"af2012b0cdfa449f186df2f8dc9b3e64b48b8c5c630cc8d3c4df61973499e7c4","sha512":"c6a642b4f09c7dc0b2679c972cc99e4c1e00e268d309aae062883d3eeeb7d3e39bef53388dd20aae7f733da57ed2374c1b12ded0997cbca2762b4b03c332cbfd","ssdeep":"","tlshash":"27a022ca38ca32ae020230300f0f20c0e0b8c02c030e0328800a0200b2300a002ffc3c","first_seen":"2024-06-24T12:34:03Z","last_seen":"2026-08-11T15:10:11.980508Z","times_seen":18486,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/usePriceChange-PEKvXa4R.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/usePriceChange-PEKvXa4R.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/FeaturedGames-CW2_S--l.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:12:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 279\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7I1ljwZVqgmP5LncARhU2OaB8kNNTJI3Wq0cjeOX40wzzYN6npbY8Bj7drAZN8e7Xu5tZn9U71sENLpumin1g3RHM84at9cWnguUow%2BtV28pJDcLlQD4mN9YPqvTj0IlasXdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d06dd9b56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":471,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (469), with CRLF line terminators","md5":"d8c5a11011941647d3e73d49e4d64112","sha1":"d040d45824943678aca554d0132429292e8c7932","sha256":"03fb9817aca8dd670b1976b0c8851f4501fac87fe577467b5f705b030c81898d","sha512":"68c4177ff04afd0fe18f174afee8b61211f92a3f2b7f0489be81e3c4232f56cd911301ad15d5d204c262e98cbb1b73aadde972ba2b8310158714088f5bdc1ae5","ssdeep":"","tlshash":"9ff027bd24901827545e0cc4c2a485571fd126e96bb9831ab230c82d36589ae06aee6a","first_seen":"2026-04-30T19:32:29.777225Z","last_seen":"2026-05-14T23:49:57.408477Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/944.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/944.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1622\r\nserver: cloudflare\r\nlast-modified: Thu, 03 May 2018 07:43:24 GMT\r\netag: \"b3f35d6ab2e2d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUJ0PPtzoh285%2BZZQQpyro7SPCoj4XkRd1V%2Fj4aOUrU43RKm4aaxsoctOXRqQFixjdzpK5QyJ7g%2BrMK4U9QN%2B2GIC9Tb0fC%2BfXQlEHlzXIbXFa9TiJIpGrUp7Ha81U%2BsosUzn3jTsV635505Jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7e04120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1622,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ddfff9d5ccdad2adabd2e10886be1a9a","sha1":"00470d3b972fcf703999a7c0f3cf55e585b3976a","sha256":"2b01aff2b6cd9693e7938f3f72ca832280f963d160269ed089ab263d0ffa1742","sha512":"0f891050b574350a5fea4037f8019ea7ed7b7c732bc0b29ac85164a1da7c4791f669656da591e5a993bc6a667e8fcf94c8a93466c1b9f6f806092cef0f6958a4","ssdeep":"","tlshash":"17312ad75914fa4e365b759ebee000445e2376ffac8ab00808b1b4f7c142f0a03a1bad","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-01T05:50:49.407384Z","times_seen":68,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":14,"connect":5,"send":0,"wait":27,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/Casino.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/Casino.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:12:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=h6KizwScuAUsib4gqFxjEVXyWgBpaIKjJ4HyW67QBXQ-1778590244.1397412-1.0.1.1-WHUwz8.hS6HJKuaw_NdRT0bClT11kewPn_5aub5BJhba6qFmF__1d7b3sa5kcEgsVXBG_Pj9Eh19sHyea.KqNc4lIoq82k0FR80t3waQRG.BeIp_XpV9XK8DFrmfCnRO; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qiQHdIUklQJrcgeBfZHiqH6KApQvh4EqxcMM33UXB4CO1mXlVBvV41BeV%2F%2BiqxjvZIkf31wfwUtiXm0H%2FQiCVftRwUqX8oTZp5P0sof4QYvXKF5XYD%2B8N7UgIxGX%2F%2FewZqvA7br9VDQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68665777-50e\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01db0ab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1294,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3df444684921a4a44f2dbdf6aee0972a","sha1":"f0110696848649c2c94de0765f5b22b4617ffe66","sha256":"d4f76e693c5a014a2184795ea113ff8f42a1f7196243728ee128fe81ed5b30c0","sha512":"bc7fb348d4746e017aa074bae5f3b106d6a3db9c1581876ba7db93537b1a4643a8c2695b424ae4d584d03664bfdafe1b3477134f7bc6f5bc142f8a5aa54fd4cd","ssdeep":"","tlshash":"1921dc3d470289f86e455db5e43a0934c69d817ab1c2479cf23eca2277220d8c7ce468","first_seen":"2025-08-22T01:08:50.698252Z","last_seen":"2026-07-23T15:17:13.267907Z","times_seen":116,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":58,"dns":39,"connect":4,"send":0,"wait":84,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/VideoBingo.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/VideoBingo.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=rvP3zGVqCD0SgX.hNKNo1AA45GkkrmeNE_JKkqermcg-1778590244.1344578-1.0.1.1-njMajzbQvl001QxmtOl0Tq3buTdw4y9Up3skBkDllF1xSxJ2R1_Xt4ZzsRcMYTKc19vPPFwe42n1kG_4nar2oxxI5XmythKQibrXWJiGfLrTZTvAUY0UfXE593Pzldku; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSSzdVBwIpHOWt4lte1YLP11aso2NQVhxGjMoiXnTeDYzehqNIKi41Oj1u73TwUmvghg1F%2BT8W%2Fmf8B8Q79v5%2B0mvWgGzBy3dWf0SPgsWMJKpNLH0GM8cCsCqr1PbYNZTZohMlz0h1c%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627129-7c7\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01daf9b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cbae8aa582bac1aa011b5159e475a38f","sha1":"0d140fc00b303fd23250218e03c28ccf986a39c7","sha256":"dcd44096973914fc9f8fdeb79a3dc5379403c3d1411854e634ab7fe444578271","sha512":"05e2c75c337a1fad9f895fa0b1635725d1681e774084ed34084444508df8dc8501c01644b19ab4f9a948c1e5b6621fd67df4fec41eaaeaf187d1a9e90c58244b","ssdeep":"","tlshash":"e24133d5e7b0a6ac2ccca59d6f2148d7350ae0bf6db36a5ce22edc580b53e1c0611c99","first_seen":"2025-09-19T18:19:26.310809Z","last_seen":"2026-08-02T18:55:38.496245Z","times_seen":85,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1404\r\ncf-ray: 9fa98d0a38754c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfvWH7-l2WGZEJvxD_-cbyo5fufmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=722+3 c=0+3 v=2024.10.6 l=1404 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1404,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"434c7550a1a937d1e7e8bb8416691d9b","sha1":"d837654b42d1474560a5698cfac3514209cde2c2","sha256":"5f0f065528ec2543e34a03df1cd588b4c4ce7764d1ff62e67cec0677f638c549","sha512":"eefe6cf29ea82af55070456f2bf2cf1ab3c3328938ea092695f0a25370e6cef7ed1da43633a4548b22b46d7d7a87253ef01b2c01847ea84725cd4acc7be813fb","ssdeep":"","tlshash":"9f21e6a32c3914ddefa65f1485a00d8dff03c1a5983ee3d896e83548e5788da6ca00c2","first_seen":"2024-12-05T15:42:26.602777Z","last_seen":"2026-08-12T07:04:43.5796Z","times_seen":2942,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/1273.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/1273.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 839\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 07:16:10 GMT\r\netag: \"82dddfc7276dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dAUD41GoH8%2FDJRzUqUg5gAMiqQeGljm9Tf9tmAKyX3gYjfAYvCPdSjfC1X8Xh5BsL3F3OWRRdn25q2syzUPW18SuV0%2F1JvSXorm2iyE%2B6FXGRz56iaGmWNA0Iwak57029ktOErU8UOXfeWoa8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7dfe120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":839,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"77a34a889a6af7eb92f91b878ffe9cf8","sha1":"90cb49bf52962a7ab37a94863bdd49d13ddb2cfb","sha256":"0fbc0f5a14f9a37d841dd6557e947df7a9e7fb3d2817fc67e37d9c89849702b6","sha512":"48ac0aa90a425fe87279da261c8599836c531b2d1d3c70fbffea6b717fee6aafd37b82d0b1b612e149f6d4cfb3f04252c2b8a3472fc372b0eaca0425d200c478","ssdeep":"","tlshash":"7d01d6c290ce08ffd22035a433078023e0b74776a5082929c329805dd7ec8594a0ff68","first_seen":"2023-07-17T10:48:36Z","last_seen":"2026-07-29T05:53:33.379435Z","times_seen":252,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026version=e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0_d0759614e4f00a7b48632ff8255d98df\u0026language=tr\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_localization?organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026version=e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0_d0759614e4f00a7b48632ff8255d98df\u0026language=tr\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=600\r\nexpires: Tue, 12 May 2026 13:00:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-length: 6121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17251,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (16389), with no line terminators","md5":"ac48c5871024eb4e9d5c7bff779bfa91","sha1":"2573b1f20dd2a419de798683ac7d1b7a898026f2","sha256":"221de5fe4d05f615229e3f021636e9f6ad23651855c9d6aafd0d4ea15b75c1b0","sha512":"12a16caf3b0d06ba3b9446b6c04490e283a49ebbe36194f2186451acdf5df006de6556bfdf6cae8c7743f6c860a1fe8a9795983b7cfdfe6399a8ef71d42558b1","ssdeep":"384:XES0yW3FhCIgdTP3kQGpFq5iB/E/tuA45Jw3E7D:90VjUsQWcW/E/t05JuuD","tlshash":"f272fa084c6fbc3e5f6b27cbf8e9595fe0ee0755e1605827da8e843a62443c3229791d","first_seen":"2026-04-30T19:32:29.947489Z","last_seen":"2026-05-22T17:22:58.173368Z","times_seen":7,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/gameDataProcessing-DwOfc3Uj.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/gameDataProcessing-DwOfc3Uj.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4348\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8ekrR2ymtGKfQdaSMoIbrRGIYMb854k0O3XBMCZExIsaTre5Vasl%2BcNW6qFkzQpQ3F3VoDf1xzB6Wh4u%2FInAwR80uC21H6Po9PMMj5l0Q%2Fb0udtOLHJbfUKA0l3WuFzW8xSfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d043d6456c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17259,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (17257), with CRLF line terminators","md5":"815330b586056d0998ced8d5c5af7d84","sha1":"60cd097a6e82be034577bc789da45127f679f5d7","sha256":"3f8f6306ad6169aec22b45a7d1dafa246b0e5eb494f61fae7ab13046fa4b5a05","sha512":"c3441eb85b91a4b47c6678011c7f47f8a576439643fe1679eb3d8acf905cfb1e95abe6244af7d2457e8f54391b187d894acdcd88b91f9320cc3dd39b81cf5b38","ssdeep":"384:lwphrrZxhxlVz12awqhvTXDsB4Pzenac0aoK4A1n8:lCptXDe8Q5X1n8","tlshash":"f072750b8a024c12c97e4639c0ae15f1b9781b32e8b8cdd11a655c7bfb5fa5b31e1738","first_seen":"2026-04-30T19:32:29.788603Z","last_seen":"2026-05-14T23:49:57.436928Z","times_seen":6,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/DisabledMarketEvent-FWjdbj0n.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/DisabledMarketEvent-FWjdbj0n.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/FeaturedGames-CW2_S--l.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1256\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXNjaIi4YOi29AexSXoAcXoFqDG8clPjaJOGQeVkoBhIkI2C7eKPyOBC3v0bm6M7SqLaf3Gps2D%2BRLJU%2FqYv0PUWrDVO9vDViZs5o5CfiA7rIqZRNIp037JrXGUuvccTJ4m7VQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d06dd9856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2718,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2716), with CRLF line terminators","md5":"2004c33aa5328e146ed737a41dd0257f","sha1":"082f0a2cdcfffbf505ece618d440d9585d0578cf","sha256":"23fe4259f06079b20d6ce27d573c0aa7e46c7d2b900cdc0e061d4a9745a0631a","sha512":"4c0607f58495b89c6f493e9593e35634f0d3f971adae574433a223d32ced36d778d45f9fc1d9cf7113eaada8aabebbe5f78ac5f0dfaaf25f1d98f9aaf35723ef","ssdeep":"","tlshash":"8a51866df290fa3d993600dcd27b1f1f201a17a2d6560592d0be8c29155c0dd366ffd9","first_seen":"2026-04-30T19:32:29.72443Z","last_seen":"2026-05-14T23:49:57.308507Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galabet1074.com/configs/d212f7f1f16e55d50593214ba05a0f99.js","fqdn":"dataspot-bucket.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /configs/d212f7f1f16e55d50593214ba05a0f99.js HTTP/1.1\r\nHost: dataspot-bucket.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=wbplXKCj.s2r4bhs.1MDjZ2iCaFlh3N_S1orvmeSAJk-1778590244.372432-1.0.1.1-A8L6PIqIK3BrU9QaRFqdboScNCQr7kOoekOuOTi4huarw3ZIETfKFjPawhT0EWIZcJ8k7xqLYfDl88FbpQ3lynuCghjE67zgSj62GPuxy3rOjGB_qjAf_9SY1vXNvRxe\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 18:00:01 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 12 May 2026 12:50:45 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RGo%2B84Yfv6mKDwKp7LUm1TTP6RuQRESqBUfKKZrVCGcpVOSy7%2FvafRb4BNXwUzifdhXG9pSMsXkNAQA%2Bh1U3bTtu9SFr3Vc3mlQEDa3KtEP%2FkJHN%2FP%2FvnbW%2Bqss728WcH7O5bhPDPFbm4JBNuasNe2sw\"}]}\r\netag: W/\"6994aca1-47e\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d080eb4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1150), with no line terminators","md5":"c502cf55b2a3f78e648f2bf2b2eb6582","sha1":"cd87424dc2922aaedb4d7418e581a1419e8ae5db","sha256":"24f898e9c39f054c6511010c44744db4702dcbf9c75ae5cbacbca2fd852f50bc","sha512":"ae83a469460b683155b1c51ce1309db2b9324f146a6274fd33a18d7b5e2f6807baa4c9d049ae330e03917b4bb85ddaa33122250a7e286aa541fa0fc60cf7ad97","ssdeep":"","tlshash":"0221e49664d8bf7706f01ef8e3156a48b4567f487031c849529fa89d6c214c24579f8d","first_seen":"2026-02-24T14:18:16.940585Z","last_seen":"2026-07-06T22:32:46.912147Z","times_seen":47,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=494052","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 06:34:08 GMT","end":"Tue, 23 Jun 2026 07:34:07 GMT"},"fingerprint":{"sha1":"6A:FF:CB:88:7D:2C:21:DB:DF:9C:CE:23:37:4F:33:97:B2:66:83:F9","sha256":"D6:89:30:57:7F:09:DC:DF:2F:F6:56:BD:C5:FA:DD:99:4A:6D:A6:D6:C0:95:94:F2:71:EA:ED:8B:67:DB:6D:46"}}},"request":{"raw":"GET /wc/rewards-main.umd.cjs?v=494052 HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 12 May 2026 06:53:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Tweu0WEBGLvGuaYNHVz8rfwaSXW_xJ0Y\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVa8ae13SQvsi%2B0eupMvzM2D50%2BXKYBdUwSFxY3QXLyTnt9uYf7eLySHhpD0YWpqC2k9fi%2FceyaedQ%2BzxgbPjMCLJDeCfvrUZF3fo1EcZvXO4YNhL6JjpQlPo0OyeHHFhJx6guA6rvcy%2FaplLOysWKc%3D\"}]}\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: fXyUKxj6uNopwz4igtpnLndRcCvPEzOhmwZoVGyhsrU4XnOb_iAXGg==\r\nage: 2834\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"ed8d0ebf4cd25bbc172c889583e4ff02\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d0ada01723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":956394,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35637)","md5":"ed8d0ebf4cd25bbc172c889583e4ff02","sha1":"b7306e0bf126e2b4a30ac610e294ca47888f0cec","sha256":"723efc713c285ee282fc5bb79f8ea846f0cbbca82bd7e09992a5b910254ae803","sha512":"d63397864ff0f6314e77643fb25eb18f268b94c1bf1714affd1985f92d9039d53937dbc9c771d1cf26dd1402cdab9361f4d87a1ec2266a51d48bc6a447565faa","ssdeep":"24576:XlujkeYV3lunmj3+FzO6EgkVIdTzvIKUKgbx/sQluirm9d1R7Ebt:XlQkeYV3l8mjOFzO6Egked/vXTgbx/sw","tlshash":"07157c9072563434c37795a260fe0509733d5b036806c6d8f2bc99992fe7c9a62bbb7c","first_seen":"2026-05-12T12:51:50.968033Z","last_seen":"2026-05-12T17:10:48.538027Z","times_seen":4,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":60,"dns":3,"connect":3,"send":0,"wait":59,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/public/proxy2.js","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.winwingames.io/","date":"2026-05-12T12:50:45.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:12:39 GMT","end":"Tue, 07 Jul 2026 23:11:19 GMT"},"fingerprint":{"sha1":"90:7E:2C:27:B0:AE:B2:70:1C:09:CA:A5:EB:B0:ED:3C:FB:33:60:E6","sha256":"D1:CE:FA:9D:79:3B:F6:79:1D:CD:A2:97:87:52:B4:4C:7F:63:B5:FB:4A:22:66:FE:29:5F:38:F5:74:60:9E:46"}}},"request":{"raw":"GET /public/proxy2.js HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 12 May 2026 12:50:45 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5JAL6gv3RcszFDgRdCklD7UmZDlIrcOxRrxOfyTvWZJQt8l9p77UCF%2F3f3tOynxXeu8VpIbTusiAiVUmmuYX2gw9EETFbMQmIuwEO1jQ4oXHKZWoFEttBjDEZVDOYNFW8aJ2kZQFfo7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fa98d070e34b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19498,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1296781ea2c9cd24e19fe155b42373f2","sha1":"d7ce9dffbb2482bc2f3795cdeaa727d99e49644d","sha256":"de74ac92be5c23abac0e045e3380edf98b53abeb1abc7351e98ec06a71a01359","sha512":"3922435bb5f624625705a335938c57a7addd890b26905e7097bbed9882d0508fd10eacfd3fa32cf5b570deece89987d97773fc9377c68416dc03707c32e4af72","ssdeep":"192:0e/p461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:l//Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"ce92860e927b6123447334bc978ba146be1150971d0acd847f4ce394bf85b6eb6b27ac","first_seen":"2025-12-24T22:39:16.372563Z","last_seen":"2026-07-01T19:33:43.411538Z","times_seen":59,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1074.com/api/public/v1/tur/partners/751/seo/page?platform=0\u0026country=NO","fqdn":"go-cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/seo/page?platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\ncontent-length: 2659\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=7.kRma7xxLKePL2wHknEIhEqWJu.jqJSjQj2AOVeFVY-1778590244.1896536-1.0.1.1-ofhY2_evkcl87w9IAwcqR8rtPG93qefPKWyZcX5UiKdalfP0wQ_Jsk8aTmou94ex2NL5xeRgeXL4E_g.NsLQ0Op0Ur2wGfHc5jipQmnslXRq9YFxaHwerA6Mo2hrdsDB; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eSNs8oFU9cFCoM5L9fggjS%2BeTjrd1ZExWvbYJlTvVitb81VGK0tcdmZPiPfLtCKBEUkIiiteGp8fgIfs1rNJ4DtZ9cULzQq%2BySL5GhqupP%2FkvQXChHNlm2IhDPgi7kI0ExUtPEdS0B7Z\"}]}\r\nserver: cloudflare\r\ncf-ray: 9fa98d022b77b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7671,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c3cb355e0745f8d403e214af1595e2e","sha1":"ed786d0ae61ad6adce28150c04a932c4e9bcd6da","sha256":"2b7c48aafa192476fcb639519893f40c28c1de98bd5e66b84769edc55b047be2","sha512":"1c1840626aba24469d43e66cef0893e9627c25afee6ab6a955e6cebf21946e2cf3514c9587cae3c5815a3b7b5ceabdb18cde0fc4b6d5cc52e798e14c7c456b62","ssdeep":"96:E2K/6TXWpoS1kKXplSunUVtRQl8bqOHEyj7fuSE3Ytvkeu5Jbrt:E1yTXENDplfnUtQyDjJE3ovy7bJ","tlshash":"76f10f0e37962d9f038a5fca29564d3c4fd55386fe41a91c8d63ce1e2bcd278d22ae01","first_seen":"2025-12-24T22:39:16.082152Z","last_seen":"2026-07-16T16:07:12.954484Z","times_seen":76,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":138,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/ButtonWithAction-aRNeoFXx.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/ButtonWithAction-aRNeoFXx.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:09:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 193\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o6tzcEOYof11pWFl0vWLNY1BMD4w3dDhRspzqU4plflCnaslaCIDKOkaG10ngehlTVk7bfPCwpqu2fqx%2FPdO0kqNlcXLauy3QW%2BIuaBJTy1ZZfT39AFqOpuYieWLusWyB2t%2FPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d023d3456c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"25ece52b40728ac71e7b869661677dc3","sha1":"1bc3c13781d3e5f633ea81c18223bd26f0961024","sha256":"27d5490d9c8258530202cabdbaf380b7955ec0f3ef6d2d556ef88a8ab8342d73","sha512":"aad4894c7059184b2b1153b1e205bf166f1886869ae95d8311a4f77bee7a4884501a8d90a15c51ede3143a88dcccd4a07e841e7d34304f1b9d509d59ae87ba98","ssdeep":"","tlshash":"85d0954b9481d2f903c57990b31bc0112d156d74e7d89551804c78543b3259e852fa2b","first_seen":"2026-04-30T19:32:29.906761Z","last_seen":"2026-05-14T23:49:57.435066Z","times_seen":6,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/GoogleAnalyticsTracking-yBQHUQgc.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-yBQHUQgc.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4572\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uNXn7Cr5koIWL24qqcLthSna8%2FRSHvigDtxW5sdoMKFDERRDb0lFivA8UA54W0C%2B1v9%2FAGIhTXWHk8ugSO1wEy%2BKSwKfT4iGzpw4Z%2FZAlPXcHqi2xxys9kx3nnTCUh2nJt%2FkxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d023d3756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13707,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10208), with CRLF line terminators","md5":"727649e3cebbce9c49b593d32d6d0a7b","sha1":"449526ee932242cc315722b3bedb98e7d33b0e69","sha256":"1a1fa5462932c03a4b5ba35fd23c54fa63c0edc214f3eadf57da0cec261d75c6","sha512":"997b1830d52e6d24e336cd1f551ef4d26b5aa4cbf62c3486af37abe827032d05400e8761791fdda0233c5eb48ab3212dfe8279411103b2c37dafdce21144140b","ssdeep":"192:mWYceR0SE+m/C8b3bHXC876hoxGE0VK7D6L7kBNrnPWh52Lz2PM7mBz:bYcoE/CEC9EP3Byy2PdBz","tlshash":"bf52b55c32adb0b682df6054587f720bf1755910a458f480a265edf46ef8caf026bf36","first_seen":"2026-04-30T19:32:29.949542Z","last_seen":"2026-05-14T23:49:57.414707Z","times_seen":6,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2176\r\ncf-ray: 9fa98d0a48a24c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfepCHWB1qkSi-cNd1o8wsvD9BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=16+2 c=0+1 v=2025.8.5 l=2176 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b91b6e5024dfdf6e8a4d61f0f74dd13","sha1":"1614f764ed7b516c7768fae0966abab152ac7d1b","sha256":"00e34844a07301274fc65fdbb65891aa95436b94c4c860d9edfcb96331c5487f","sha512":"c3948fdb40f0f4154fce632acb88cf9cf57ce39d2858e4934d8820c4d5729da238c569448b5bcb6d1780e37f005cb9f5ed60093005cfa451a92270c4c0034566","ssdeep":"","tlshash":"48413ab2c3378c72ce2cb5e3e9b2d5168b449a5a91859afc22413d33a4b145cc4b89e4","first_seen":"2025-01-28T05:59:32.007883Z","last_seen":"2026-08-12T07:04:43.306613Z","times_seen":3370,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_0b821a84d7c1b162f43d103ed9002274.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:55.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_0b821a84d7c1b162f43d103ed9002274.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sKrHhLHxbCwG0dsK4nLA88r6FHdhyFoVUCojb7Y8ikU-1778590250.2254179-1.0.1.1-g6U2bxkkmqyMj32lRbnI37iOpxN.CwYp1Q8c.Z7nxt8onAqywSwaS.SQP.Zg8oioRYb_lw4szTcZzeSt4Gdwy7ZXJtuNgqZQQ5_0m7gclsV9QIZuZoslsQAXhRgmFByW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 168948\r\nserver: cloudflare\r\nlast-modified: Tue, 12 May 2026 11:22:12 GMT\r\npriority: u=4,i=?0\r\netag: \"6a030d64-293f4\"\r\nexpires: Tue, 19 May 2026 12:50:55 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9DoU8SmebLOLoEE6dGqTyQhMoum5FXhSAKm%2B4pXll1l5va9iXs5zivZa9LZpt3AZR7%2BbifdFjLuf0tnexkPZjZn102EiU3L3exIUSl0x9Ms%2FnG2w3JWaU4QQChZ%2B9dGGBcWNVfurKU0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d499e5e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168948,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e4fe47e8e709417ea6d8aa6febdadf78","sha1":"bd43dd7770711facbec1f34c3590cc1bedc249cf","sha256":"2b6e9060e838fce9db78e7cebeeb4f34097d676f416beb7cdf00bfc1acfe1c30","sha512":"ee95d00ec5a84a3614f79fd0b273cdbe7088f0166eaa36862b156617844e09f0b34f211120783932940b2cec00a07c0a4f1e49e184f782e240258fe56dc1cb81","ssdeep":"3072:ZW+QiDZrKKVNZKDoyVt3wedQEx40/AqvI3hiHka/ebwkp7uD1g3sY:4+Z1RgDoAtJfx48gxQBY7uG8Y","tlshash":"15f312b6df45f29eec96532a869911c10c60657feeb492700ca3f39148311076eea7fb","first_seen":"2026-05-12T12:51:50.977169Z","last_seen":"2026-05-12T17:10:48.41552Z","times_seen":4,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":83,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/bmw/replacements?_=1778590241394","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:41.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /bmw/replacements?_=1778590241394 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nset-cookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; path=/; HttpOnly; secure\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: public, max-age=60\r\ncontent-length: 103\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:41 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDHdepQtE%2BcjVInZqoz2mLvQgJw0jxXTIyICZPfJVHw7uFtOLTen0Li7dcUOwvvStg69rhbQWMtp7nozmqYC45ZwnXz606iEsQfs7g7MJPkgXEeJAgO74JB6zt5ZkaR2FG4LCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cf0dc3556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"422626faea073775d6001e779a91bcf4","sha1":"e1eca72dd2c3a82ec1b6667e2500e6fb0d9d6903","sha256":"ca1fa00d4d7daa44c2c65b3bf25d82916ac7402902365785df3459feaff8e7d2","sha512":"4408e29ebc2124750ef65d3bcd9c0723e8af582f1a487ca9d635a34500046ff3cf6aa8a91c7518c6ef2fd77c5cc22d6d87e7e6ea95b1f0e4e0fc5167502bd5a1","ssdeep":"","tlshash":"b7b02223032a2e332b00f2823880a0cac3020e28cc00f08aa003a38e0ae8fe300028e0","first_seen":"2026-05-12T12:51:50.978516Z","last_seen":"2026-05-12T17:10:48.666231Z","times_seen":4,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/12.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/12.DJPUQwQu.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEiU472O6PMzooOVl99X1R9Ry24WrNdfWy4X2Po7WdTnuhylNDUmY6grSqYR4JaRuCOU6EBMlek\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\netag: \"640caab52100a1e9dfe618aaeb79838f\"\r\nx-goog-generation: 1778587684409832\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 300\r\nx-goog-hash: crc32c=IuJCUg==, md5=ZAyqtSEAoenf5hiq63mDjw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-length: 300\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-08-12T20:39:19.640436Z","times_seen":29143,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-C7fm_l4S.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index-C7fm_l4S.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 58515\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FjjU4vhEIGOXJXc5IJow%2FQI8DMevL1uXvG5BpLs%2Fb5pVLHqRgj2BRNAXYvDxWas0gfXIVBTOy5KhJn3MqAf%2BGsauRa2o1c%2FzInbHpxuthc9GOwXDXBI%2B%2Fol%2F34HTEf6oL9W04w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cfd4cc856c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221193,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523), with CRLF line terminators","md5":"015f13f26cbd87b457e4ec6b937fa51d","sha1":"5c6191881f2972f8e8091e52dc22eb55a34b8588","sha256":"2913ac802b9271a39853964416349a15e9de6e618fe9d56f09aa471fde406c9c","sha512":"036b2422abbf2e6f1b0191550bf61e4163ad8472b5ee153cdbc8bcfcea65654f55a6bdd99bde39c3fafad7ce54de57c6d5c9dda202e74f0322dc2c5bbb339b8c","ssdeep":"6144:cfeB97084RG8o2O4YLIALoh6wjYSd51jXVvFaNIacDGRD6Oq:cmb7084RG8o2O4YM/jYe5daNIARO/","tlshash":"db240ac4b274b0a556e594d4502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-04-30T19:32:29.746144Z","last_seen":"2026-05-14T23:49:57.379599Z","times_seen":6,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=m.galabetl075.com\u0026t=1778590245288","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.winwingames.io/","date":"2026-05-12T12:50:45.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:12:39 GMT","end":"Tue, 07 Jul 2026 23:11:19 GMT"},"fingerprint":{"sha1":"90:7E:2C:27:B0:AE:B2:70:1C:09:CA:A5:EB:B0:ED:3C:FB:33:60:E6","sha256":"D1:CE:FA:9D:79:3B:F6:79:1D:CD:A2:97:87:52:B4:4C:7F:63:B5:FB:4A:22:66:FE:29:5F:38:F5:74:60:9E:46"}}},"request":{"raw":"GET /anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=m.galabetl075.com\u0026t=1778590245288 HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZr8EF%2FsTq%2BS%2BLwkfEstf%2BGUrVqLDFvDTlPLxE3t9g%2BEI0hnG5LoPotYmUorj6VhTR2n6dMc9enGpfF0%2BEEm0facn9AIyzH9GUDRrHeeq3bsu7Uxm3RmhpO5owZDZUdg8wKyRzkhKdqr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fa98d0a29a2b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3043,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3043), with no line terminators","md5":"9a1e9e7adc4e1be0ee2fa9d7e91389de","sha1":"bbe54f207674b4bd4436752db30dee3c651f21da","sha256":"7fb314f12d37141afc65627ef4a6c93d101c1dd92b2685bc2f5c6834fc532b04","sha512":"ab79654d0bf0b6c2fd48d439156000540982cbfba365e1cde0050643450da03526ae4d51343cef8398b976ea2a944abed454afbea3079d007b53ca1f9eec57b5","ssdeep":"","tlshash":"d251a6d7b450e0c5638e8ade1d3f33c6e6b6d87a1e960c0d6324b6a0f949922d36513a","first_seen":"2026-05-12T12:51:50.980133Z","last_seen":"2026-05-12T12:53:29.769001Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/2/4125.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/2/4125.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 1040\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Apr 2018 07:16:35 GMT\r\netag: \"267ad07aeccd31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 11 Jun 2026 12:50:46 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ECVgFyYeBBqGPWbhniqyfoYGC2FKQRT8IApqQytnbnHyLPeqXuY62tr5vMjbAoy5mpEiPkd1ZQY13Rlm2c7y%2FFwQG0elt%2FnuZhgT4bUZBtxHKYFuzQQdLfwzDusp0JlyEC%2F%2Fe%2FqzB7g1d4jZg%3D%3D\"}]}\r\ncf-ray: 9fa98d0d5e2656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"5ce448e131a4273dc1c738df70520e84","sha1":"845080285e3d8884da1214fa0ed5c1fe03a96ada","sha256":"e4bf426759260c1fc2b5ae3b63376674ed4e3710a14d2e6b8abe0ac8047c2a6a","sha512":"f47587511258fae5a3a96a24991f846b07671cc57d26f079e62f9bceae18281f28baf8d561254ac231fc40a60ccbde8ec85b724c666e98e0db1e471ddbe54e4b","ssdeep":"","tlshash":"6b11d848081a8828e98d70323d184430d7f947fb43b9ee07b363e33d47c7a424b819ba","first_seen":"2024-08-19T20:31:49.096436Z","last_seen":"2026-05-23T17:36:46.361859Z","times_seen":118,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index.C0U6OaZb.css","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:41.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index.C0U6OaZb.css HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 09:09:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 81219\r\ndate: Tue, 12 May 2026 12:50:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrpmyUaeHKwSUnZ0u2duUdisY2t1eYpMVoZEWnuevBW6jAHKWMqwcZPlCCHCQSgeL7T6TdA5QBXhpgZphx2jW2CO%2Fep8NZM9E%2B2AEtwd%2BQ3DZNaLlAP2mRqcxhIwgkznpdz%2BxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9fa98cf0cc2b56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":516726,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62128), with no line terminators","md5":"028a8be9f68610eb4b13e3cfc6341454","sha1":"e5ff46f18057e44f2f7a4addb894d78744b0dd09","sha256":"8d69076f3cfaec2330b366f06164bb671f2c0f3b60303dce485918b04058a0c9","sha512":"4dcfe15686a912e0fda028a4fc342c565a7e42e3015fbbeaa592aadfbadaa96c3bc3e979732bd2b6be4a30627523f9d14fcd758152c5a61744e1f37cad92567c","ssdeep":"3072:HT1qmID/L6Zt4llM9bkoHhIZpbnj0tseBrxSaQFy:HJqmID/L6Zt4llM9bVhNVRP","tlshash":"3cb4c8a2968822f87b33d61f93d5b38cb014f071d9621d6ff19a612dc6d66900263f7e","first_seen":"2026-04-30T19:32:29.927822Z","last_seen":"2026-05-14T23:49:57.402999Z","times_seen":6,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/payments.json?v=04/21/2026-12:12","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /payments.json?v=04/21/2026-12:12 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 5901\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7jtYDqDLB6BQ91nFDW4KPSf4Y4ETbp9hhtZuRcsG4yzFWKwc5G2eedRuPqyYWb5uX6YaxQ%2FEe1d8fvNAFANlFbC%2FKjDsXGLmav%2FvbmFEEhA4Mz26203xebGK0rDxkdaM%2BGTu7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cf92c9d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96235,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3ddd30afc164bb68545c14549c99e060","sha1":"81715dc8995950495ced9576c0003e78f7cded45","sha256":"a09207f3037c9ee0c360776c721f6d3dfd6cc5f1ba39dd0c8fea3e8285b9bfff","sha512":"37494dd24a88619d62442a12f7d0edf4fa7af73f467bf205c4cee2a778c84839a222e6fe41e278cac8650f05fc02aaaddf4bb34996d2adf86a98763e8fa5abfa","ssdeep":"384:SuQirsZJGtBM29V/6QhiEL9ztQX3tS7cf7t5tJirHIxiqaUiox4n7qbaci8Y6unV:zrp6zELrtfNsP/R6b","tlshash":"0f93f1a4d8690ce7198572e468bf9207766046478e2dbd4eb75cc82d0fdec0fadb426c","first_seen":"2026-04-23T13:18:15.351757Z","last_seen":"2026-05-18T20:41:30.85433Z","times_seen":27,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1 HTTP/1.1\r\nHost: secure.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 756\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1776,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1776), with no line terminators","md5":"3f17bd3752392df8c6043879e12e9a6b","sha1":"c5f81a1fe2616b626ffa77c513325c84316c8b54","sha256":"374ec3a705b86d46d9ae8561ba3e71fed86136eb625704af0a32b6e6d75f04be","sha512":"c3e7f76a32836c82f117102b10e02b4ed266495d7f8fb7a3703c4366db2ddc3450fc26fc83df7211925e5d3671f3455fb544e0599cdd0638b5ce9693e718db6d","ssdeep":"","tlshash":"59314173aa10c91d7174c225f98bb08e895e534e8644acf2b29412fe0ed0ed58173e29","first_seen":"2026-05-12T12:09:28.840832Z","last_seen":"2026-05-13T08:36:34.884948Z","times_seen":63,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.lNruacqf.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/livechat.lNruacqf.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEjYjkcGZ-nefEaoawWrcHUyeLUW-401JMXItg6m_GfYIeuEh92y0OgB2SAgQpaiHkqbBKvet2w\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\netag: \"75e0827bf699f7aec7b3e67d85c2cb21\"\r\nx-goog-generation: 1778587684463985\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 432\r\nx-goog-hash: crc32c=Kyrd3g==, md5=deCCe/aZ967Hs+Z9hcLLIQ==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-length: 432\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":432,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (431)","md5":"75e0827bf699f7aec7b3e67d85c2cb21","sha1":"597b11785b90d608e9516c175c80757fcd46405e","sha256":"a9631dbd6d6a5813d3cb5e5cf033f3a3976ad56234214d9ec7a1c90176b9180f","sha512":"f31e161fe46910b76ff61b1852e2ab3f24b77cfbd4c7becd1f8d9e124ec6c45b69024a3faa3bc42b91cd145ed21a8df276fbf10607208a0789ff2633c3b00b7c","ssdeep":"","tlshash":"05e0aecbe3047ee3f1c99de5c454d0e26af253960be0c7a0c0ce13b15361161ce44a42","first_seen":"2026-05-12T12:09:28.842476Z","last_seen":"2026-05-13T08:36:34.797743Z","times_seen":63,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":21,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/WagmiConf-DUgl5XWp.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/WagmiConf-DUgl5XWp.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 33268\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5E2cvBU8fDZsgFDfzobytu47ruk0cEULG7avlQY8AjYDWt9NeoP5CyJLhofSUp3FdHJbHJzQoIxqLr5Z3DRMf8Nxm6Oh5JOBHB28yCiKKVILhNZDJc66dxjAjtxxBIZTtssuRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cfd4cc756c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":100999,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48214), with CRLF line terminators","md5":"092631219e2d2e194b760880b5ee7d3a","sha1":"c203f1803a691c9e1db008c19533fb251c81ff9f","sha256":"7ed67fc2edf74742c2e49ab46f69cf68bcf89d0d7c5394b4489173287b9eb532","sha512":"3fb526a15666e937099975aba759417e06718bab1c6a2800779a29283c430904cf1caf0f2b0f64ea332439f3449384d45ef14b1eb4dd2f285ece49754a2bce64","ssdeep":"1536:a2Caz/SCdwD7ZajZlO7jMMDWOx6uxPU6nUhVxSuS7XUF3waGBfGYBAEytq2bPVAc:bCaSlx5xPUaU+mEy1bPuv1K/XGk","tlshash":"c8a34ad07196b46103a74ae008bf440bf139ac34200e566cf269ecde79b96e99277f7d","first_seen":"2026-04-30T19:32:29.794827Z","last_seen":"2026-05-14T23:49:57.369116Z","times_seen":6,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-Ds8oq4WI.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index-Ds8oq4WI.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: no-store, must-revalidate\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFfMpJj0SXk4aEsclofxDIjAvHCx0L8ToLV4Vz9uUNRZsT4Gh3X6X4pOlKiTiwidHM9vKCd3fSOihvkdYqAcOC3DUi3P5lmk16Z0VcVeO149cQRfqFLOGfRzEzML8KrzGKyl4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98cff8ce456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1933207,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1081), with CRLF line terminators","md5":"c32078365cc03d7bd243235178c83e0b","sha1":"dc00902a667578dcdf2c17b03bb8886d56a3bb18","sha256":"56133dc082f66b79ab502603ce09e57358c94028f0dbb3a0800c3f78649e27e5","sha512":"94835d9a19d9ba536ae26956f6c3017bd01bb11f93735a68e36154b711721f51f0ad40647d13287192a92dcb3716f1d550f00ba4cf21cf784deb27f2ee4024fc","ssdeep":"12288:8IdCsSaYS7WoA2kjfJ78CF2xLRiFvqASoNiL4pkDqoI8b4D6DfYtWpwHqsKe0PvH:X2ixTm4v7uvqvhOiKYabap","tlshash":"b825d54b9ae028798233e379af2bc405f925472f128486577a7c95591f7381883f6fec","first_seen":"2026-05-12T12:51:50.99048Z","last_seen":"2026-05-12T12:53:29.998147Z","times_seen":2,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FacebookTracking-DC8cwDZP.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/FacebookTracking-DC8cwDZP.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 373\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owKCNdvL1K4rgk0WtpwwTxAi8FTYoT1n1Hqa54P5fJGN%2FfDjFN3SicI9a01PKLBZ0yiqJtS7uSTcDRRU5zW6VRJ%2BgGU3A%2FPEevP0DxcZfsXmIHE8dVV1ptPSvrFuBLszFaiGzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d023d3356c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":681,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (679), with CRLF line terminators","md5":"c89003002629a25a4ecefc681009a509","sha1":"ed04a148d338d35f5ae876b5d32d7adb480d277a","sha256":"decf3982610b7183ed6bf5e76823dbc0a10511d0660d674fb87e989d9e4735a0","sha512":"413e57983ccf4f6a10ef0dfbc3277b0c000a8aabc17bf41bb321c71bcf8f026f3f64d0c4ed9ff0149329a21ae8b708e1cc55fc5916364f068e8b1b257f41b87c","ssdeep":"","tlshash":"ee01fe0f2c85b47d167c18a8d3bbd81425ba590e2a8b54a5c6c7cdb9367458a40ceb8d","first_seen":"2026-04-30T19:32:29.825307Z","last_seen":"2026-05-14T23:49:57.41558Z","times_seen":6,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/DepositCountTracking-DwXH74aF.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/DepositCountTracking-DwXH74aF.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 384\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L9Wth%2BPPrLhHVlz6lClhJSO93qXKi98BYdcr87m%2B08YYcRBc7AO24ZbIpHQ0FRSIaf2rs8%2BgRt8g%2FY%2FNR66rzyJGemZiz%2FGNhReGEz8iW3DnQdQ1ShZ4kxfKPbtxaVdqhME%2BpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d023d3c56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":646,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (644), with CRLF line terminators","md5":"cbaa5d0b6fc3e943a771aab2877cd463","sha1":"0cfaa5d01bf240321aa51c21c9f77c01e34b0be8","sha256":"2bf199a5dfc2dd746b047653bc39b450dbe3b5faf2d5eb4f7cf13631c051166d","sha512":"b1df73524587b2c4d7ad1c4d2c9ab9c61813e224082d38e6d1d25b9c8d2b982ac7d295cd67a3611d57c0900fa77b1c8a89f258ba004abc1cad240a26c943c5b9","ssdeep":"","tlshash":"7bf002971474d6f889c93a4472c6e8b367f1755cba23c4c781bd8d8a0349415d5cdd2a","first_seen":"2026-04-30T19:32:29.735839Z","last_seen":"2026-05-14T23:49:57.385258Z","times_seen":6,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.BLfmipM-.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/5.BLfmipM-.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEhC-orRwB6qlW4dbl-Iusq8tPYhnT5U94Qukcx-XCB1gQ5Fa-_cffqdDcs1GdI2mDg\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\nx-goog-generation: 1778587684394404\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 21459\r\nx-goog-hash: crc32c=FblMsg==, md5=ygUZhbqlPsCF69kJbY+lKw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 7671\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":21459,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"ca051985baa53ec085ebd9096d8fa52b","sha1":"0d227a057674cd49f399305704e6255013253725","sha256":"6d1b8f21bad25678c322a949ab887efe69bbec0181b323a0c2c6e9656e5137de","sha512":"55017b6de24d72b94b86b6b8e32afe8088b2941b6fde446d384dd755cb030a78df916a26d0265245c58f6d7a870b4dd0bb1d414c2d9c31cb610a42f122a8a3f6","ssdeep":"384:5O9SGx6PSW5gcJkswSEQR3eEyHVqqcyOtlcLDhlQCaG5ENcecci5EqYHM+p:5iSGvW5gmDdt8qVyOncLDhlQNcecD5b4","tlshash":"1aa2f9ed3192b03443578864406f552bf26daca0b88d4c40a166f1e1bdf8efd9773ba9","first_seen":"2026-05-05T09:53:37.889339Z","last_seen":"2026-06-03T09:12:43.249499Z","times_seen":2511,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/CasinoTopWinnersWidget-Cp9RoxNY.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/CasinoTopWinnersWidget-Cp9RoxNY.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1100\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FUAws7K6G1sJ1whx1GnxS0atWYBPYlYuapR9OabC%2BJW3GebXacvQlX6VXFHXiAcJ95GTZYh0iodhxhJxP5Oh1QOQM3jq3YfV3QtQDzO63k9xGx%2F1b%2BKIUKqVHNgcvlDpYkIKxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d042d5e56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2703,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2701), with CRLF line terminators","md5":"166aae5d1ca790b8f310208615145abb","sha1":"6553cd3b171ef01f7219cc0d588f6a1f6846632d","sha256":"66c8f1cc1c1fe8fea76681b1dd8bb37c19f79020757d42c33cb5d1a7c1f3c321","sha512":"3cffbd5e22de1e96ff4f373ea4696e38f9df74b92666ae3f7c3af51fa7449231719068e6341232f69a92c55105995728a7b7a2b4bcf34f1f5e42bf0aa4c3f406","ssdeep":"","tlshash":"4d514506d0049f7cc35b8dd67c654019aaa60aaad5306ee0f9bc1a118b741ceb59e7ce","first_seen":"2026-04-30T19:32:29.914354Z","last_seen":"2026-05-14T23:49:57.330382Z","times_seen":6,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FeaturedGames.BqGfbibX.css","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/FeaturedGames.BqGfbibX.css HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/tr/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 09:10:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1547\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0HXQdCapqMYwAOo5Ymw8Qzi%2FPYhQieIZEllqlUBW6jkzyL7hbhKjzNGjAABIjg4CfoaCA7vfwERBt1x%2Bu2KmWPehNZfOvmW1D54HeTAoGQBEp7NlJAi%2FcjE1mqs82nmaAcX%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9fa98d041d5556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7083,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7081), with CRLF line terminators","md5":"b744ffcf1bc33cb7ad49b6cb31a5ad65","sha1":"547127cf06a86bdb9dfd2c27c70ee21f63de5ea6","sha256":"7f099662e78a7a506b4cbafa4f62963161e49973b59aff2d436633df4c737fb9","sha512":"3f69f2fc78a4414c9f9e3f87e2ca83476c90fa615e9979a97165dda6c517f758f4543efdbade9db5ddcb4eaf7a60ed7c4c7c6f9170510ff3d1d9c7d4edfdce4e","ssdeep":"192:TYFnOFceEDvCElpcFpgZFcV3r90CCkPaifKLwp2xP:sFnOFceGrcFp+FcVRWv","tlshash":"53e13115710e3a387a23a1ff26905b8ef4dac0f1de2a2d3ea490272bcad63560535d58","first_seen":"2026-04-30T19:32:29.892569Z","last_seen":"2026-05-14T23:49:57.354815Z","times_seen":6,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1074.com/api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 680\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nset-cookie: __cf_bm=ScN5GFZkNZhCGRl8aPIGmz7MF3FO3S9MW1D6EHO9VZI-1778590245.0745313-1.0.1.1-if_BjoalS_yVWnqI0OjZj27WP3UYEBCqwvdmuAgWRUv0GTqL.7fwrxz7fihgmmYxABTXNhdUvaSAKwQszIr2mTIql9KPhahGPMVu2X6TTXwI8BuDAfd_0RA27cnxh3FS; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ylr70ejTnB1BYotm5c7a2vhExl3%2FSVTVjms4LeG%2BN38W2DJOzCp8TenQ5N33NbwGIbyEI3HPZsT7v2ccZxYasPB1D%2FFXdrVjlny8Z8KRNCBM1OeQAAJbKtWW3RF%2FQDBJPwkwm2FAB20E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9fa98d07b9e0569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2588,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"81cf1e3f85be85a03b07cd81e2576696","sha1":"47507be3803c05a178e225aca4ac78d457488f46","sha256":"a87781c5bab4c063649b51438dc1e3ad0d32a431267088a39e19599fcba3abdb","sha512":"182035c9b3eb82dcef55d26a2d04614036ab59813999f0c908e0bcea36c5efba691fb1c16b63d2a04f4647b184e4fd8b3f564e7c5e9b8d8b166081b7408698fa","ssdeep":"","tlshash":"a951ab23706d9dba5b407740b8c7395ac8ee1447dc0a9660ec494f8d82fa23ac6d32db","first_seen":"2026-05-12T12:51:50.997588Z","last_seen":"2026-05-12T17:10:48.420985Z","times_seen":4,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_e2992c962b629258e32496488e343bb8.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_e2992c962b629258e32496488e343bb8.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18922\r\nserver: cloudflare\r\nlast-modified: Sat, 31 May 2025 11:53:11 GMT\r\npriority: u=4,i=?0\r\netag: \"683aeda7-49ea\"\r\nexpires: Tue, 19 May 2026 12:50:45 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Usrrn5bEezMiveapkhXJQ2Zu%2BAl1eofHGxA82Mzagc%2BDJOG5zLPDzzcX8RPc%2FqTXTg%2BiK233g7vqw6aeP73XVDMIklXGjNcjLyfQb10ahQe731IS1J2Ln9BdYqHtXFulKVczzs1AI%2B4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c3bc276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"903c69c562a0cbbf1c19ffb312754ab9","sha1":"6b4ec5970d79a6e68c3452ed6216390060838a25","sha256":"0e4d56e0eeeba1be555347bc03ed2125cb792ae75f2ce14668b360230c341f18","sha512":"5b6ebcac994b2e1c2544a910a711bfc046d701704b371d62732b1754bafa403e5486b91eaafdae875d752b7e3122fc33e7f22a463e581b4090d2779f80ce34b8","ssdeep":"384:8Iy4zvEFK9vUhGAB466Z1W042wifdTAyYQiai1i23xB:fzvEw98Q44R1WmwifdETQiXDBB","tlshash":"2782d0a6787d1671ef46e14583b883de87210a0d9b91878d1f18a420dd3d72ecab51be","first_seen":"2025-12-24T22:39:16.347068Z","last_seen":"2026-07-06T22:32:46.901152Z","times_seen":55,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-CypFmzSc.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index-CypFmzSc.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2410\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRutJL3uZ2dPxRdL3X3LXkYbxDnp2bPj%2BNApPyr9MxSgIgxL6uVbhfg3H1H9bgI6lvgGFqqPR%2FeavzdnaDKuk45927NR0oVY1lHQEgo8l131Xk%2F4KEvvUakQCiBjPVLqXUNyOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d021d1f56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5966,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3085), with CRLF line terminators","md5":"6381d5ec167a888ef28cc49ade1908b8","sha1":"ae32b1ed887028ffcd5a3c8f74498cefeb4efe9e","sha256":"86518a0f26dd9191250065a91a38045b37afbea90b35587e52cd84952e4886a3","sha512":"b1f3a869a41ebb0fba666b3381aedba33b8178d76a11f6a7e8457bebb43cfbd102775ad1257c352c1e30533df321f1022bcdf1c2be6160f21d87d7bf27f3e2da","ssdeep":"96:cCqtCFVeh7FHpokS73s9lsv2InwLRiTvHUkmEQKFr0FdWpA6u6PEDdxrOq+IHWhF:x+ljijHf/0FdIuSEDdxP+Vj8EB","tlshash":"6ec1b85a31d07534c6e344a6914f42aeee3e7638f00f5060b23e9c5e3ba1115d6a3ebd","first_seen":"2026-04-30T19:32:29.79103Z","last_seen":"2026-05-14T23:49:57.416388Z","times_seen":6,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/jackpot-jNbP6Duk.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/jackpot-jNbP6Duk.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 243\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0huIGkoqVyFSpkzH2lUrsqevDEcKiK1V2XCtuoMo%2BKUgdGQyQfdeNVX1tW5ENCqaAnjq%2FRNPaadw8LXQjs%2FiOYSP7TJfa5KAZ%2FHvR7WIi77DR3V3Vco1wfO88woL5r3MrQMEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d041d5856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":377,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (375), with CRLF line terminators","md5":"58c6b0b11883e69b52c41fb6969432ae","sha1":"cadf0ed3f23639098da9ed2b570cb9b949fd260b","sha256":"efef501e418f3eb97f1e4de01c024b8a3e930e7cde7f2019cb209994eb608bd3","sha512":"6669b90e56e649504100d1dd9dd52d1a9481406409af6c014f8a4c02e29841d6284f1fdd26770535194877e9586c983aa5c17227a5d26b9fdc3354616e3ee719","ssdeep":"","tlshash":"e1e068eed8c08dfb967007552bb418840e2416ca101ec9e4be2672612800b8828f8239","first_seen":"2026-04-30T19:32:29.843557Z","last_seen":"2026-05-14T23:49:57.413027Z","times_seen":6,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_ae861d6fb01b158ffdda02b839c1f7a6.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_ae861d6fb01b158ffdda02b839c1f7a6.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=wbplXKCj.s2r4bhs.1MDjZ2iCaFlh3N_S1orvmeSAJk-1778590244.372432-1.0.1.1-A8L6PIqIK3BrU9QaRFqdboScNCQr7kOoekOuOTi4huarw3ZIETfKFjPawhT0EWIZcJ8k7xqLYfDl88FbpQ3lynuCghjE67zgSj62GPuxy3rOjGB_qjAf_9SY1vXNvRxe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 173750\r\nserver: cloudflare\r\nlast-modified: Mon, 11 May 2026 07:48:48 GMT\r\npriority: u=4,i=?0\r\netag: \"6a0189e0-2a6b6\"\r\nexpires: Tue, 19 May 2026 12:50:45 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9o0%2FjjAPjIoWD3SLxqPs6NcBV4WrQIy%2BxsJOCPb6tNDEOgSKAYTW2Jfd1cizRBcWJVWWsY8T1Di6kGcCEeO4XUw%2FdlvXAGtaxVj9dtXxXqxiywyMWgBD1ZtxHsGxxr8FsNgqCfSbsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d07ac2b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173750,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ec5911cd485b11f2c88e1f907e28c0ca","sha1":"5f0d632ec287775ed6606bb5d22a8b3edea5daca","sha256":"0dbed80ef4d2083b8302f4c0418d83130ca239e4594785fbc3bd2251fc0727d1","sha512":"8d10be291c1177d9c581fc925ab2339aa62e2ba53e4ba1c1615f1b32b5a657f3a2fd5ef92346b551982f9c470f5c9223916c06ebc1c361be6b1343e1ed2129a6","ssdeep":"3072:b0EWg9RxeICbfJO4VfZkeyrtbGvjhjMcRFuX4l6Uz/5ICgaabk8sxyd0gp+R:IEW3XbYWfZLvN/Fqfg/Vgaj8sxe0BR","tlshash":"000412d539fb1b8edaf71a6db5e6f42c3b15d8868a151df38f1686f11ec970000b860a","first_seen":"2026-05-12T12:51:51.00179Z","last_seen":"2026-05-12T17:10:48.399035Z","times_seen":4,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"rgs-wss.galabet1074.com/jackpot","fqdn":"rgs-wss.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /jackpot HTTP/1.1\r\nHost: rgs-wss.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.galabetl075.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: r8wkBWS57lfOLsyMDwNzrg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: __cf_bm=wbplXKCj.s2r4bhs.1MDjZ2iCaFlh3N_S1orvmeSAJk-1778590244.372432-1.0.1.1-A8L6PIqIK3BrU9QaRFqdboScNCQr7kOoekOuOTi4huarw3ZIETfKFjPawhT0EWIZcJ8k7xqLYfDl88FbpQ3lynuCghjE67zgSj62GPuxy3rOjGB_qjAf_9SY1vXNvRxe\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 12 May 2026 12:50:45 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: idDtGLyWy4p8rr3A0GCPsjZSwLc=\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cf_bm=R26qzShb0PtPCA07tuPmO5D5TsgsgctX.00xfXIQNtI-1778590245-1.0.1.1-PapueOrYcE02LERxBIemitQKdz.fdyaBmqNKAPnqD0y0wi3WJIUL669lSRS9euTr1PcxIzZtML7m4nihWw2YEY_bSbhpyeeamFcM4p0We0s; path=/; expires=Tue, 12-May-26 13:20:45 GMT; domain=.galabet1074.com; HttpOnly; Secure; SameSite=None\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=10fmfcJiNiOAo2ddjNPmV%2FYhjEppTj3i%2BaDUro0OkBEh8E166wyOfR6pQiDPFx7dihpZW5UCuN9KYU7Ixpe2L6w42Pd2GPoAMJ5fiMhN3Sh3EXTp%2BetuIFYohbYOG9dP8oWv%2FB0zRuo%2Fdg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9fa98d091ff7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=481\u0026min_rtt=461\u0026rtt_var=132\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3125\u0026recv_bytes=1390\u0026delivery_rate=7743315\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=2f120cdcedc69387\u0026ts=95\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":73,"connect":74,"send":0,"wait":70,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1074.com/api/public/v1/tur/partners/751/notifications/whats_new?platform=0\u0026country=NO","fqdn":"go-cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/notifications/whats_new?platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 990\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nset-cookie: __cf_bm=J.lUdHatFbLvbjXedI7XtdWIi7oE4HNmuwadtqDZEhE-1778590246.2317958-1.0.1.1-p1H5Z5NV91Se646HcW9.FXfHysLtVLAOUgQTBerE0qFno5QhZwh0H.Oswd2vHrG0wTYGUhYn0EdHS0vtUzS7c84bCrs9.GeblBviFQyDb_MEPXJH5V.kbPnroNQOgwv3; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9UhBJLtJs9xUivPJh4MLG6Dq7K9dZQoNwbUmzy%2BWF4B3MzoesO2dgBPJ%2FEAGYMttvmzpVq2s3O1nOkukyTPGSpzYFFrYLKK7QpaDBX0Pzgd424KJgmELZMRDoAlrJxqYn6Y7VBRVPBK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9fa98d0efa43569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1824,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6727b530b88e5064643e5f10ddfb635e","sha1":"35b5b6f6a269117cb8d3ebbb5afca0174f1cc17f","sha256":"627ba4ebb3b6c3ba649318ef55a9eec4bd5bb67e2480da2529cb35b1f3f154b5","sha512":"3bf0d3c19b213b5ead3190b889fe0e0183bacf7706d72508fd24a1d65f86322dd3e9efeddcc41e353bd48845f7546c6306616b875c9c3176048d50093a6da3cf","ssdeep":"","tlshash":"08316235663e4b5c8f81038a9087f13ea40f035bec54fa34d648cb79a0686b8e5331e9","first_seen":"2026-05-12T12:51:51.002951Z","last_seen":"2026-05-12T17:10:48.507722Z","times_seen":4,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/img.gif?f=sync\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a\u0026ttl=\u0026rurl=https%3A%2F%2Fm.galabetl075.com%2Ftr%2F","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:48.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 20:49:24 GMT","end":"Mon, 20 Jul 2026 21:49:13 GMT"},"fingerprint":{"sha1":"BC:6D:E9:77:29:ED:3E:9A:89:AF:35:09:53:CE:9F:E6:55:C9:D1:12","sha256":"C9:0F:F8:00:7C:EB:E5:00:42:0C:EF:E3:9B:3A:E0:A7:2F:DC:F9:A8:EB:16:5D:DE:B0:63:40:8D:31:FB:34:85"}}},"request":{"raw":"GET /img.gif?f=sync\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a\u0026ttl=\u0026rurl=https%3A%2F%2Fm.galabetl075.com%2Ftr%2F HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=088334197e174af8e933b264753578d0; expires=Wed, 12 May 2027 12:50:48 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d1ccde90b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-08-12T20:57:02.125588Z","times_seen":103393,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/conf.json?v=1778590200000","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /conf.json?v=1778590200000 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 5278\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IVMZBGazvocJPkMGEHYZgosxvWfDEs3TtB%2FrIUUzyjCG%2Bpm52XMkFognCXtEXF7hD1IQ%2BLRY8RrCcJJhEi231SJba3hgry15q%2B4YozlzreO1ZdHxHquwB4ggbOI7QGwwZzaUJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cf7fc9456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":23518,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f71ab7e81f5598b7554168df7c50c8aa","sha1":"1f4563b277a433642af6195289b607f8a0a06d76","sha256":"e58c69d403a7583202684cc1c50bb7a8801aa1db28fad39551cdcb3b8fff70a2","sha512":"e01d664c3a02db3068cd0d03b78bf19bd71b60f97cceae7f845af51be153d56265f279e7a71c35a9beb1e9095fc0c663511ad5820b19564a2811f1e57f396851","ssdeep":"384:tiodO1z2PEn+LoU4rWmnzl8mAAtrfSs32VkrN/SM36:tOz2PEn+LoU4rWmnzl8m3trfSs5/76","tlshash":"52b21028d5744db302c661b4a8ae6147f534948b4e98bc293f4c826c0f5da2f29bb7dd","first_seen":"2026-04-24T13:47:04.805783Z","last_seen":"2026-05-14T23:49:57.342383Z","times_seen":15,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/PromotedProductsWidget-BmBBmXho.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-BmBBmXho.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1026\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJjijhrbkOYTEEM%2FHWFu2LCSvC01MZYStqmD7jDDrjvCKNHagGbOgpQWaP0n703YbYMoeudB56T1gOzg0hmZIFebH%2BUYE2hKL2RzuAmmbtchFA36Ic3DHPCJWAEn5M4kaRy6Ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d044d6e56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2121,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2119), with CRLF line terminators","md5":"f9f8074e3a11cfd1c273f1b563199dc5","sha1":"6076d56c138570583511c7d77e131c36e35d85f3","sha256":"a259e43e1bb8a25a400220ec4f08441a32da2569a1666ebc27f57bd5f5902e21","sha512":"e6634febe1e2a8907f916fe4757b2c103b6c30c63ba387041fb9be3923e412bc632c20a426d80912815c67f077b21d1a9af6c7d6c3a89a9a1208c168878e1626","ssdeep":"","tlshash":"2c4169c3d934a279f23e5cec114550c838257d18d96558b150b77c1a913d816bb57ffc","first_seen":"2026-04-30T19:32:29.921789Z","last_seen":"2026-05-14T23:49:57.407266Z","times_seen":6,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/withPanelButton-aAeMPmmR.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/withPanelButton-aAeMPmmR.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/BetslipButton-q9-vX9A1.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:12:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 515\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cAkzc4fTRiEaSzDVh0qDf5HjDFhpPobCB%2B5NwccySXfbyvbbzTaH3XpLkqmSm2gwzUC9hr39%2Bw4cEFD3JhtbaabJ8nC%2F5Ry55gVVoggXl4rh6nrZb%2BSJx2Oh3DyZc5uOXUrfYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d04dd7856c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1090,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1088), with CRLF line terminators","md5":"135099bfdf29dcef1a4ad144e2519eb9","sha1":"340b47f364c6fbbc8187cca7d8fb55c78ad89d63","sha256":"2104817f5665831b4156571e8b53e0dd675b5cb9df5af83c7aeaa11b993733e0","sha512":"3933bab1aafd06a0d1f0dcab3897db9bd30c652b9c35c87f7c2f562562c3dcaabf4f4c95b64a76f8df589fbd6cf87d284225c94cf2884368fa0b5d0faa8fa789","ssdeep":"","tlshash":"9211f0e4f5c4adb1e0c40188577b2cb6719a32d9dce1149021b6c8da5fa90489a5e9ae","first_seen":"2026-04-30T19:32:29.865626Z","last_seen":"2026-05-14T23:49:57.443303Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/8ac5f332cb4a018e18169dae2853bf4d_casinoGameIcon3.svg","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/8ac5f332cb4a018e18169dae2853bf4d_casinoGameIcon3.svg HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Nov 2025 11:55:06 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=zmqN89NypldvFeSu9XTh4zfbTAOkoNcwPRD4XQatZEs-1778590246.2135582-1.0.1.1-ECVvB.QahW35UGrOXWK10X3hb527DuMcATPuiivSqCzhY04apG6OL1.kKg_O1.6IXBVPQaYVg6M7GMGKJJa76XKcR_TgJFrhYO6094GpGfBqx1d696E58ZKR9sNobvgQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bu3tEfUyQ36uzQq4e9AOMHjfQYewZtyoah%2FtwdP1i8YZHgMOk0Y1lFuhy2WJ4fD1M4BAgPSjEk2ONezrvPGIQBTF8P9CM0cAeOEFUEiBog59JGC2lTJ9ij3BOq5Pyv4xyfFHtwAacwk%3D\"}]}\r\netag: W/\"6917189a-358d9\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d0edc1676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":219353,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5695d4737139f5688edf32ef7c30be9c","sha1":"b9bc978b51e77e906c708e983d46da968fdd9ac6","sha256":"0cd68ff71f34206f6c6c376b88b16b8095a46354fbb68ddbdf81041597b5ea15","sha512":"26deb8d94a8d0b30b99196d03f821fa7df94a885a519cb155d47613392a83124cede5614ece6768a8bb22aea1de7c41d3bbaeed0913765faba21669addbf1126","ssdeep":"3072:TtoOx13NtIM+d8t19sGhb83qI0elj8qTZyE3frwt:Bow13NjWGhb84Wj8qTMEvc","tlshash":"0824d0b19965184ac1444b98e3ca84fc083e75d7dea35ce6b3c8bd070dd1e9a0eee91d","first_seen":"2025-11-27T18:02:23.884377Z","last_seen":"2026-07-04T09:14:02.202303Z","times_seen":19,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:47.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 20:49:24 GMT","end":"Mon, 20 Jul 2026 21:49:13 GMT"},"fingerprint":{"sha1":"BC:6D:E9:77:29:ED:3E:9A:89:AF:35:09:53:CE:9F:E6:55:C9:D1:12","sha256":"C9:0F:F8:00:7C:EB:E5:00:42:0C:EF:E3:9B:3A:E0:A7:2F:DC:F9:A8:EB:16:5D:DE:B0:63:40:8D:31:FB:34:85"}}},"request":{"raw":"GET /p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:47 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9fa98d191dd856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":697,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"cebc7667967e601f02df39ba19712d86","sha1":"c7d3677008d76115cc41ba1b734aad112c743dbf","sha256":"089867e58a1de5998b0d74b779119d8a30fe54616ea3ce76063a5530163febea","sha512":"80a26888852e4a15ef49580494958b710628b404f4026c5b218daa918280b24a8f2fcc698ac49ee66c6e9b91954c54f5f296abfd4645d71cc32c83d4ba199378","ssdeep":"","tlshash":"2b01c07d5b86312454f634906b2bbb4a743b12be5c535808848d0414a3a8bafa21add8","first_seen":"2025-12-24T22:39:16.348988Z","last_seen":"2026-05-22T17:22:58.055376Z","times_seen":51,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":63,"dns":34,"connect":4,"send":0,"wait":29,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.D0_AT6ht.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/1.D0_AT6ht.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEhMKmbE178yTiEtpAwWmt_3SAWGRLlUo9XdlX8DVuueZhNz2qcTcGAekp8q97eEWiBkve7p2Sz7bkPe\r\nx-goog-generation: 1778587684350868\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 55782\r\nx-goog-hash: crc32c=PvnpiA==, md5=Vox6BVQD4VXbQ1hsALloLQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 20078\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":55782,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (55781)","md5":"568c7a055403e155db43586c00b9682d","sha1":"56c1c0c89894221e749b4b2bac5e3f3901ea2b4f","sha256":"de8fd99ad2663b1c2dea7508d911ee627403191d7d20a8e70f8b4372f5e73c2d","sha512":"63e6854af00c532dd7482938ece0b27c1b61bc6e4c91ddde9185d22fd7fba06c8b7a19c17e3002c1c96aa06da94a9b5dc6e6df008adc4dff48ffb0de7dbbcb4b","ssdeep":"1536:GXrqgq37RvTh1mmHPW//sQE8QOe10qS3+wX0t:gENbh9O/TQH10LNs","tlshash":"3e434bdef181743167e715f2a07f9002b73a2a2c385c81b0f629dd9925da04ba277f6d","first_seen":"2026-05-12T12:09:28.963999Z","last_seen":"2026-05-13T08:36:34.835554Z","times_seen":69,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.BkPmegIK.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/3.BkPmegIK.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEhx9EONDbjS62pcVOWm3Que18VX0JzxQYsu1PkfCdW550j9567jlUe2nm81LyDASeyITJOKoLM\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\nx-goog-generation: 1778587684433949\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 133258\r\nx-goog-hash: crc32c=PVER1Q==, md5=P7gQOxxHo8F3MNhF5OHn/A==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 41717\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":133258,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50683)","md5":"3fb8103b1c47a3c17730d845e4e1e7fc","sha1":"4a04ad85e28141b7706ee724ec3eff494475e372","sha256":"b236405a130bf73e46ed9bb149600b23ff1652a570be15d3b217a64c801ae024","sha512":"dfd21d15f709896004a6e88fbdce600685f3fce824de8c16618ef9aeb2042bef64c722b48e79612ecd355505bb5e5f6f3426220d8429f1c87d22df2f1887f37f","ssdeep":"1536:VL9gUh9CvquGSVD7dfXkQAXB30qOFex8nHHvDZECnjMWWAGYUhWd:VLqUh9CSu38QZnvFvQWFpUhWd","tlshash":"14d3f8e83951f9616bf302a710af5807733c292b680d4960a211fdddb9b841eb17bf9d","first_seen":"2026-04-09T11:23:51.32121Z","last_seen":"2026-06-16T08:53:49.926385Z","times_seen":5244,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/X50Wheel.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/X50Wheel.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=WpizeBdrZBgNQnrb66khkwyFX9D6WgcHwQ0YKUTeuZE-1778590244.1300516-1.0.1.1-e47FrNZd66FTbciC4id0lXpCG5ooa58z.enB7KqAO18Ccftfrl2M6Yf_stkIyyOfDgETIBKjPvQNmeiMu8iqMDy.lyGpPYVGWmQti0PgMwy8PnZBGdahDws8EEpb5I3p; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WxvGpKyCs9pifMOL2mKp7ZW16tm3zElWtY%2Fck0ovSonqo5uvXW5MnGsPkD3KIyJRknk%2BnQ7aExQovqx2rqC7ILeJw8CMLE5mqmqWb%2Fx9278rSgG4O2%2BYezMueEx%2Be3X78crwHhpHrBA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686270a1-65a\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01cae4b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1626,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6a4e68d64ae400253c8553f277334db0","sha1":"9f4421a8ee6dbd94b15c62098a2808e7a9df443a","sha256":"c7d0844a8e2c9ee547a4b9c4927823c95fca71407aab9cfa85bc1175c01fc1e8","sha512":"3472f7072defa5f4f70e595969443c4310d2f86be210449dbebb88defac139a9bd68503f7cefce592b93b10f0910846e815b72ea960c2809326f390e1c0566cc","ssdeep":"","tlshash":"ba3122f5fff1ceb64c9413bf3a148ea82595c02d8e618b58c83a4d98215383c9f502aa","first_seen":"2025-07-09T12:38:57.780257Z","last_seen":"2026-08-04T12:14:01.596998Z","times_seen":193,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/TvGames2.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/TvGames2.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:31:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=i02WQdybs7QCHu0A985hIyw42vOfQqpjhlYBCuNUmV4-1778590244.1349237-1.0.1.1-VSVN5MB4UP7Ttu4h5MYlsOFsajtkJPW3VeeileNcAiJB429UCbXTbXzRQRkGgKZRbxuy7AHz2prlkIvhXI8AwyQPhsWYOnxHwVWMiruqA26N6qtMIcxuEb9WICoN0tdW; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSGm2OkCjedmp7UX8AXjbvr83e0VHvhbfcEKjJp8nf35hqBORjZlp%2BVPXNmrZmzpLeN28ABQaih0S5Hl2sORT%2BIPc6uSfMoeTsrgqsuqJ4wOGtyNqSfoM9NGcGqb5KL6p3Wo4%2FadWmc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68665beb-8dc\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01dafbb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60d24e57914ca41e702277a9ce44e813","sha1":"bfb08c8dce26d91b1fdaa008ffdea07bc100e0c7","sha256":"144a8bd1616f38a95bc6e7f59283e462f358a2dcf79e10cd7bd256d49e6e4134","sha512":"43503c3df559cc8b5fab3dcd299f5dbfc8d5a6f9dbd458781c53a409d859ed730ffc24420d462b914b4ef96f1d63d9bb508ef733bad33edadc5a2d12b22e4eb5","ssdeep":"","tlshash":"7f4165f9efb091f46dd94fa9ef324cec750e68fd9f220a84812c861c66a3d94d644410","first_seen":"2025-10-09T13:22:28.980997Z","last_seen":"2026-07-19T15:19:37.834753Z","times_seen":79,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/InternalDataspotTracking-DK8fDMbr.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-DK8fDMbr.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1728\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hCJdIW6QRKhsnhnipdKzaKiLGiDWns0sovtE5nIllFdtJXQZTfZn7NlzsComkRfcOhvIfC%2B6Iz6UmYuGAxILyDbyHTGtTRZmtpnx0SxIb7pfrXZS90%2BCN%2FCOI86usPljMGcEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d023d3d56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4866,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4864), with CRLF line terminators","md5":"cd08975446a190db000d5d79ba28ae42","sha1":"fa2ab04876e1c5eef7e0d4bc32308de889d7081e","sha256":"8645f139380371358e71312a5e6d91a01419166e2af17ae5213e536a23a3513c","sha512":"2901dafdae97a1cbb92c8aab581f7e62ead2f0112f4415ad627dae314a55195ebe45ad1dc751c588f2ea49ae39578f64964d009cf5b8b5a625494599e9617ff3","ssdeep":"96:SBZUCVtfJREr2Cv7CvXvqvxGr9qCtz2T7TGgZQ1bZmn41+pnys9OtmksEZRtifh4:SBZUCVt7ErNvuvXvqvxGZpFCHVkdy4wU","tlshash":"35a1741fc83c04747051c5dd587796abc2bc7c999180c8f0a02b9e6a621be09d7f6ea7","first_seen":"2026-04-30T19:32:29.755311Z","last_seen":"2026-05-14T23:49:57.382329Z","times_seen":6,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/HorizontalSportsList-e7xvm1uO.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/HorizontalSportsList-e7xvm1uO.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 264\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeFU4hR6mgTCiv5FVUN4LXNy%2Fw2NgGgSntAFvWUZKHm9g8oDLUgxZ8oX3aG1ImFgnZ2rLVtOWgRgpIn8ET5i3VyI6lpkt6A0eWKF6GoyCaqVesOVUF%2F0JQTY4OA16pVyUrcojg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d043d6656c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":423,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (421), with CRLF line terminators","md5":"3ce4378be8d26dcfcdeff97efdc574f2","sha1":"e4107ded57744f21117c0b51b32b710c445664e6","sha256":"1cac841c416e09b71f68837ecb39d1a4bdee6813fdc2f4283d2e524758b9e3cc","sha512":"1ab84096c771a3adbad79621354f4f04324527a34dd29760c8393084f36c7b506d44de3d7002e01aa99a05b0bf241d8672f5740947a15b763b9aeb1387b95a23","ssdeep":"","tlshash":"cbe02bc2dc618af45a1e88eba99c24857012047cff566664d298a2282b7508bf76940d","first_seen":"2026-04-30T19:32:29.763259Z","last_seen":"2026-05-14T23:49:57.348732Z","times_seen":6,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/DataspotTracking-BU1VqV1o.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/DataspotTracking-BU1VqV1o.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2593\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfxr767g%2BaoQRBJK3NE6WDy9blRdPeU4b5Azoty3vQhBqjxFpi9Bg%2BH7OqIHG59ZLYlZZSsgh1bX5b5Y0bwty%2F4EKQuFosLHd6D4uOmeW5oj5CmNsWi68UECkqwI%2FRFL7UYc3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d021d1d56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8581,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8579), with CRLF line terminators","md5":"1537c784217bed55afd36ac3a9db03b7","sha1":"5a3dd0ba87b1e3f30b5a1e14ead051ecbf00a6f5","sha256":"73de071fc0b661ff772e9cb6dabfb0d70f4061a8675f9be5ab9c4c2f24997ed9","sha512":"0a4355904615992d840871bedf203e2d35d40fa4f6da19ec575b63001c1f42c1b8d206d28513943385140ac50f8b2b46d9fec9aac801a0bd1bd88d3b932e169b","ssdeep":"192:rjybYcB+h592WkO+bNKb0e35nBaCHJNvuvXvqvxgFzN3IYXge3AmYOchj:rjaYcB0kVKaCHJ5Q/0W1NpXge3gOchj","tlshash":"78020155641e78bd6037d6ad0d4722a208387041e1339de076aacf5a9e398c28bf73cb","first_seen":"2026-04-30T19:32:29.810585Z","last_seen":"2026-05-14T23:49:57.394133Z","times_seen":6,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/Firebase-PdGS33ax.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/Firebase-PdGS33ax.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14627\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=27YoxMLZT7ex%2BJm9a9Wl546ADOG3Lon%2Fa4FqybGrp0KrfbS8bILrsY6hdyW%2BiMHWtwQ6M3kV1S1Xxeq0jX7Kg2u1xbUhbW%2Foty66g7FqG2nTZSxQig1NLXF74RjrR8g787vUAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d022d2c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84994,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4779), with CRLF line terminators","md5":"e71d3b9ca88b858220b5cf74b78c49b1","sha1":"e32147e933a304a1db430ba00b24899509424542","sha256":"fdadc427d7180a8799bbbc2eb139b2a5d8f0b20cef32135f74653ac9239f565d","sha512":"a32042324e8523c0dfc515aacdf7cefa7196746510ab82481fea71ee4e97fe109c29efdf3335f20cc0584bc802f2f458162540889a630f0e7e1b5e88247b9980","ssdeep":"1536:73B1pIuKtjc7sMg/uwIPmWP+pFxipJYBystMLCv5pvrYMUyem2Ps0cRG3oMLJjDi:7R1pIuKtjc7sMg/uwIPmWP+pFxijYByA","tlshash":"bb83b4bd7ed1363317f085af792f948be219c658280f9394746dc1d91e3a50a42faeb0","first_seen":"2026-04-30T19:32:29.747316Z","last_seen":"2026-05-14T23:49:57.357985Z","times_seen":6,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/gameDataProcessing-DwOfc3Uj.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/gameDataProcessing-DwOfc3Uj.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/FeaturedGames-CW2_S--l.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4348\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1SD9SpHla1rILb2hVKdwe1XwrGi6DWHJ9I1iYkJTskauLWQ6UU%2FXRupoVo8DCykJp2TnKEc0snT27jS5kEnuENiTeK2ttyY71QHiM10o6Qt2dDBTiUI6qGvx7%2BKb6Pt%2Fb8cWOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d06dd9456c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17259,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (17257), with CRLF line terminators","md5":"815330b586056d0998ced8d5c5af7d84","sha1":"60cd097a6e82be034577bc789da45127f679f5d7","sha256":"3f8f6306ad6169aec22b45a7d1dafa246b0e5eb494f61fae7ab13046fa4b5a05","sha512":"c3441eb85b91a4b47c6678011c7f47f8a576439643fe1679eb3d8acf905cfb1e95abe6244af7d2457e8f54391b187d894acdcd88b91f9320cc3dd39b81cf5b38","ssdeep":"384:lwphrrZxhxlVz12awqhvTXDsB4Pzenac0aoK4A1n8:lCptXDe8Q5X1n8","tlshash":"f072750b8a024c12c97e4639c0ae15f1b9781b32e8b8cdd11a655c7bfb5fa5b31e1738","first_seen":"2026-04-30T19:32:29.788603Z","last_seen":"2026-05-14T23:49:57.436928Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.CQ1y8pQC.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/8.CQ1y8pQC.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEgJGTN7wY-E-5YpaF71HA5KaBahdQOQYgVdg8ijbIu4kO-y9eXKkLWpCE-_g5OB7mlSK_iXQ5Q\r\nx-goog-generation: 1778587684440260\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7900\r\nx-goog-hash: crc32c=lWJkEQ==, md5=JpgCg24hdTEnIArrgVjppQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\ncontent-length: 3017\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":7900,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7899)","md5":"269802836e21753127200aeb8158e9a5","sha1":"0911403a6ebcd523e4a5eba7dca35f81c6c44dd1","sha256":"71dd9b7fea77de65e34ef38129b1d587ce5c3af28f5c3dd3b5a079c2935007cc","sha512":"f02b1a73c985601a515f903b1b338c9956b226418fe23a06543fe23d954910d519a6d45ba2806c8444769006d4b8ff7690f52ef74d87d133728bdc3bd3fbf75b","ssdeep":"192:t7LbrRc33jyJybQI/rsGUWlKZfZwxlcz7X5tXqjdEUyVqmh3q/La+UFkn:t7SjyJykcsGUWsVzt6dEUyVqU3qj94kn","tlshash":"64f10abff381f471a3eb94e0991a0103b9390655756d8070f62c8e54a16e6c4b277feb","first_seen":"2026-05-12T12:09:28.95756Z","last_seen":"2026-05-13T11:11:34.440927Z","times_seen":70,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/AppSettingsButton-DUXAWyLU.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/AppSettingsButton-DUXAWyLU.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 259\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkz9xYKAVLoBv0ezp%2BCVnYwn78iyrbBDHR6GpoyXSl21TB6dVL8LMq9h4dkYiOZnAKHzHXcfg8oYicXEjcPBvI1rRwqBs69nHOhnG2QgdGRp6s4c5nlF%2BfunjayvonJIcT8JyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d020d1756c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":386,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (384), with CRLF line terminators","md5":"7dc6a01a893c34a75e817f6a146527a7","sha1":"c1508cfd72de79f9ec6e7410de3069045e969b1f","sha256":"54960c5461d7c66aba31a344c54b5f248eee62133bb065ba8e24534cf4243f1a","sha512":"d1ea3f97feac40411a749ac6f282f5cbe3d29c7db0b54dc4dca77ccce3669544cf7bfaa25e7711e1e93af9cb0e68ca471a1d95791a9300765094b025575840a6","ssdeep":"","tlshash":"fae0c08790c1d3fe03d12ec1d60bc1053d166c7cc788a95240acb4617af41c6855f62b","first_seen":"2026-04-30T19:32:29.896626Z","last_seen":"2026-05-14T23:49:57.356702Z","times_seen":6,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"216.58.201.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"GET /gtag/js?id=G-MCEY36CK22 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nexpires: Tue, 12 May 2026 12:50:44 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157874\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"f5cc7c8085e342bd5fb2e616cafbf0b4","sha1":"cdfaf35d408a74b20b43d5f5252ea028c1f2452c","sha256":"6954d05ff6e96582e61e28a6bc003862b715049d41a8e56849a61058ccb7efde","sha512":"c2d3e2060a9441d24ef37ecde23de1c31a93ca5998d19230fc87c6602c186894cf54d88eef10ace0b751e5472de2d2b98d1883799b56f85689de2779f53d92d1","ssdeep":"6144:vAHqI1BsYCw1ou4wa+WhSom68/91XD1Chgan5UAyb:v0sYpou4wtRwga5Yb","tlshash":"49a4f7cdb3d675625396f478903f018ba57b28a2b44cc899f189cce42e7469a4237f7c","first_seen":"2026-05-12T12:51:51.025749Z","last_seen":"2026-05-12T17:10:48.681551Z","times_seen":3,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":107,"dns":1,"connect":21,"send":0,"wait":39,"receive":63,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/e8859ce1d80a188cc3e65ee14d48b7fe_casinoGameIcon3.svg","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/e8859ce1d80a188cc3e65ee14d48b7fe_casinoGameIcon3.svg HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 24 May 2024 07:47:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=aV8tvv1tIuGDVQWALZKl19P1btC_Vk.N_382AF7WuLM-1778590246.2077353-1.0.1.1-JhYul5EjL_Lm0EgCuKkBEgRrgPnpsTNEU_m7KJKCZrwsVU2S2DM63WjfrKprD3jyAu2JDG5FWTQ_ySzCHp3JFXrHIaoHULaOAsE3b8SKgcMINLVo9agelSuDbICxXGxf; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2B0cPLv1YmmxhOYl4s%2BBCVvp1a2NzMpzN4N5EA%2FNIUDZzl7%2FOxzzZ1nuwAdbIU3nX%2F%2FbWACACwokrEs0zqEvRSwmgVCpqjBDT0q2MYr8xQUcnxGHJYZrNzYRoGpbDbQBkeFHPHJEztg%3D\"}]}\r\netag: W/\"66504609-381ec\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d0ecbea76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":229868,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb7ceafcca1e63e104f54d69a469ece7","sha1":"b3fdd3dfc550c6cbef2e4a917bba88a00c8d9955","sha256":"387ab772bc832b6f5f8321f2388e0a9a9b26f58761674e1dcedfeaa6287764d3","sha512":"8ff61765d41c6940952428a26d1d422a4ad610a71b2cf3c0339009337ea12f096e4c242c524cbad2e0e0c2c481bcfb45eabdefd3945691c8569b8aac07092084","ssdeep":"6144:YhvW0jJNr5sjJi/Y4RGTBzGgX+muPZ1Dm55:4vnjFso/YeGTIA+muPZ1D0","tlshash":"982412f97942385e80e8444ee7e77fb19c34e5af2265889233fcb01f99b520c688d659","first_seen":"2024-06-20T07:59:18Z","last_seen":"2026-08-12T08:19:42.832932Z","times_seen":269,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/7.qYTqns9Q.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEgghRnrwaP4nnaqXiOY2i4ccVQVgKl1tRAic0OuQn9e-MRzNBTASr5MLMrlCitdOWDN1Eq0wjY\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\netag: \"d541ce2d754402b833cc65b76eaea2c6\"\r\nx-goog-generation: 1778587684400423\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 40\r\nx-goog-hash: crc32c=jQQqwg==, md5=1UHOLXVEArgzzGW3bq6ixg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-length: 40\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-08-12T20:39:19.664951Z","times_seen":29937,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/InformativeWidget-DHYaBHsY.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/InformativeWidget-DHYaBHsY.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 608\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w4gGNohBXusIbzOAlIBa%2BJB6JGlM3djn8%2FfHNZPxKeSn3pWN3K7vbE8Pa0N6Z2Bf%2BwQZsk%2BnxtJi2u1aFP3fhCCUnf1b4L5fStrIj2%2BuPp58Ns5H%2FNc678Oo4MurFb%2FgsGLgKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d041d5656c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1088,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1086), with CRLF line terminators","md5":"bb76dc741d1d0089382476835673dc44","sha1":"b8b5d782f8b1129d15d1dede64148000558f5782","sha256":"7f4e527158d0ac25af914aa9386c6a279ab50ab7ab6e4a5f0a46b57a7e8c4c32","sha512":"4cc9a253417392505e3f8df422a82a4c80becf1cc92a4e47e29665a82a425942c0ac97156322e9f577579e2b2cfdaa7a917d963999934851919141b9552a1787","ssdeep":"","tlshash":"c3117586f594d5bef0390dc44256d0946a212ee4cf38e4e999b5340ca87410bb7dbbbc","first_seen":"2026-04-30T19:32:29.840519Z","last_seen":"2026-05-14T23:49:57.328562Z","times_seen":6,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/178/357988.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/178/357988.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1254\r\nserver: cloudflare\r\nlast-modified: Wed, 09 Mar 2022 11:37:01 GMT\r\netag: \"89b25fea933d81:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L7wWhxyTKVHXrHywN%2FJ1ilGhiTjZJmohxtDImHJJWvNwxSAMQhqBOAR%2FUVGDPq4ce7BF%2BwsCDYZyHwW1LLIQcqKT7iY3j9wGIm8Q5qfiD6dZsD2iDGbMEHEgdtaGH8nWC2MLIZmAtPoC8LB3SQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7e11120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"447ab90de5a9f7be9d44b442f60d7c26","sha1":"3a3b66a19135437553253c04fea71379dc392821","sha256":"6fa23b366da25afd51d83bf5bc6f0641b63c33e61d95dd24439a9fade9865c15","sha512":"cb1d8ec179c7605a5defbf910257db20febae2102e940e3bf1962c54e4ae4049ed9b66ff6e38cf5d6194588ea96c8e00607af79beeb282b4a2c758eaeef8a0f1","ssdeep":"","tlshash":"e421e7c3b2cd646b860c3988015381e1952a87ff327aa26a9b20854be3b301319dcb70","first_seen":"2025-03-03T03:14:57.961356Z","last_seen":"2026-06-13T09:14:25.766898Z","times_seen":19,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/tr-D4j3hTwO.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/tr-D4j3hTwO.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 810\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KuFuo9G7kUkFy%2BXacjb7t4i%2BOsfXzPMiZ9Wps5e61Q1vhsiJejXeOm6MxcAFIBN%2BT3klQ3nIh%2Bsxq%2FLfIYKJ15OVBf6FJWxFh7VNk92j4%2F%2BjpyxkS0EHcMVu7FHLGrDjCRx0gQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cfc2cbb56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1460,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438), with CRLF line terminators","md5":"042cda35eb38a3fe827ebecd15eef7d1","sha1":"102c2d57230473b84e9e7c3629eb2b377ef3f019","sha256":"401f803e94940707e7a4227dbf90eb43b2ebb6d99af5e89656af57d7075a8cb4","sha512":"a2044dbfb62f4aefb50bf02cc165aee3a43e6b76e2903390ff31bfe478ddabdeb3e9ac3decaef67ab9cb4d782d822e74a95a4968e05103c19d5181c4a581594f","ssdeep":"","tlshash":"e831824c2946eab287016883882f5f04f80c2a087136f1619ba4d421bab09ee807eb3d","first_seen":"2026-04-30T19:32:29.829073Z","last_seen":"2026-05-14T23:49:57.368212Z","times_seen":6,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.livechatinc.com/v2/customer/token","fqdn":"accounts.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"POST /v2/customer/token HTTP/1.1\r\nHost: accounts.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 225\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"response_type\":\"token\",\"grant_type\":\"cookie\",\"client_id\":\"c5e4f61e1a6c3b1521b541bc5c5a2ac5\",\"organization_id\":\"8ed97eb5-b789-4147-82ee-9d01ac550957\",\"redirect_uri\":\"https://secure.livechatinc.com/customer/action/open_chat\"}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://secure.livechatinc.com\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: application/json\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 201\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nset-cookie: __lc_cid=5ba68645-5e92-422a-94e6-ec4cf4bf1214; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Fri, 12 May 2028 12:50:43 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=29dd93cf2b45ae021cef92079cf6505c37cb6d345f87b0f05ded30df5fefa6fb4d3b0af337d56c89e9974e6a4394b8f9d0142b499ccdca0e07fc9860243a; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Fri, 12 May 2028 12:50:43 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cid=5ba68645-5e92-422a-94e6-ec4cf4bf1214; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Fri, 12 May 2028 12:50:43 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=29dd93cf2b45ae021cef92079cf6505c37cb6d345f87b0f05ded30df5fefa6fb4d3b0af337d56c89e9974e6a4394b8f9d0142b499ccdca0e07fc9860243a; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Fri, 12 May 2028 12:50:43 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__oauth_redirect_detector=counter=1\u0026t=1778590273\u0026tag=0dfc134795af822805a663be77329db829858552; Path=/; Expires=Tue, 12 May 2026 12:51:13 GMT; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=86400 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"65353c00888407e73444e5cdcacc0032","sha1":"769d4a6a4325957b2d3a710baa819e7752f596f3","sha256":"de573766b348eefd3ed504fce6b1372698863e2930949a17a623d31adb0645fe","sha512":"541423246e1787803370f732ee65c8ba777489dace7552b36099f4c77a078db91620ff445a7f7c9f3f50e928bf92ad2207266023cb7095624fbb13412ffdaf55","ssdeep":"","tlshash":"75d0224f128aace086e86b5b7a560a198d631132828828c802b4d3291a4c92c732eb14","first_seen":"2026-05-12T12:51:51.034298Z","last_seen":"2026-05-12T12:51:51.034298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index.es-DtbtQDLm.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index.es-DtbtQDLm.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/WagmiConf-DUgl5XWp.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:13:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 82088\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mz7rSmbf%2Fnu8OOq%2B9snVLP2Olf5PaFntrjXlbJc2MjTl%2FGDIEvx9rwKO7RFEPUVfnAXXU5jTccMXDrBjlQYg1PUu6Zpg%2BRE3d8XuciRyfQLNp%2BXM61YVbfX0KYej74TsSnu0tA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cff9ce656c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":295291,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49500), with CRLF line terminators","md5":"0444bd8dc6abe79ca5eff79877354386","sha1":"80e565557fa25d04a7f71cec8481ea5c914b622f","sha256":"f08f94733e6ce7f9e922b5dac51d7e48f438798a4549f6f864796ffdf526a56f","sha512":"6d179696c2fade282b92b7b3b81bcb745b12f4745b6ccda17ba0485f013d75c9a03a9c3f87d3f77487e5449e959b16df313640136d5847bfeb21d99b7f4a2085","ssdeep":"3072:bzCtURKZdQZvAUmXKAMJtSu7vYK9u6INn8P1jbJphlzfloqFnN1Nd6UoY:bz8UkdUAUvJJMcvYis0ljDFN1Nd6UoY","tlshash":"cf54fa8472a7f47543d665a8943b1542f23a5c64700d902cf6acfceebdac4499a3bf38","first_seen":"2026-04-30T19:32:29.772123Z","last_seen":"2026-05-14T23:49:57.490199Z","times_seen":6,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/if-defined-CWaLTnLW.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:13:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19489\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UMRzr3jsXO04B7odi3WvtiGo2oyYby%2Fu27rIBLsMCini0UVbDKxhDzt1gnDUew8SEs87jWkWnp%2B2VfkHRp5qRsiX7KoUb%2BQEK5cDjvO33HQiHvNERGj%2FUgt4kyDxtSy1asHaUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cffbcec56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53295,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18566), with CRLF line terminators","md5":"11916cc7acf39a179eba86fc2f2b369b","sha1":"69a4b182f97a708c1dc0d9c1a5c9775c6376a57b","sha256":"d59e3142307919a3fd08dfc1c3326f6004432b617476c354ea2ce2af30668c48","sha512":"6603841b87172a020a2e0727faf1cc3b0e3c03f7cd6aaa401e1a72ca0b6503c41b937ee3403a8908797ed56f247f49d0e33a6bfdbc9390b46e2e8785230d7389","ssdeep":"1536:XsetCKv9nc1kM27Eitmqog9o/LxGRbVkTh8TEr0oGS:XVgZg9o/LxGRbVkTh8T9Y","tlshash":"ee3308d472e571a243d386e5843b001bf3757824382d846cba2da9db7c35a4691fbf39","first_seen":"2026-04-30T19:32:29.82386Z","last_seen":"2026-05-14T23:49:57.399754Z","times_seen":6,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/check-auth","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet.winwingames.io/","date":"2026-05-12T12:50:44.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:12:39 GMT","end":"Tue, 07 Jul 2026 23:11:19 GMT"},"fingerprint":{"sha1":"90:7E:2C:27:B0:AE:B2:70:1C:09:CA:A5:EB:B0:ED:3C:FB:33:60:E6","sha256":"D1:CE:FA:9D:79:3B:F6:79:1D:CD:A2:97:87:52:B4:4C:7F:63:B5:FB:4A:22:66:FE:29:5F:38:F5:74:60:9E:46"}}},"request":{"raw":"GET /check-auth HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet.winwingames.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rtj72ywxBVbCxFDn3egmwiPscHz5kyuAU8PSow6UFPny%2B4%2FnhU01NUuaQF440h%2BElAwDZveIb3fMyE8WjsN090Er6eBrjHhGhRMBcPHXBJhf658uyPgEStGkal0kIq3j6WLNLkk4r8bU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fa98d057bf8b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d0ef894fa1c5fc383cce96e2d857de6","sha1":"fe19a48e71f224e79f27804ed7d5632c065e5de3","sha256":"0b3443a9377c829f10dc4dbc281475c7bf89f141d56af637ad5c59b74d00b2ca","sha512":"988a2be034f9f80c25a7cdcbd2659e4310baea3e590b0f9fe75ac9d0d7b1d90a8e8b07f33fde07627f3f61eae405d36f9afd6cbd20061b3088ab844a0821abf7","ssdeep":"","tlshash":"4c70000202000222ea80000803002a3388008838832020200008a02000230880002802","first_seen":"2025-09-21T05:18:37.922942Z","last_seen":"2026-08-11T14:47:25.470612Z","times_seen":103,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galabet1074.com/core.js","fqdn":"dataspot-int-bucket.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /core.js HTTP/1.1\r\nHost: dataspot-int-bucket.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=wbplXKCj.s2r4bhs.1MDjZ2iCaFlh3N_S1orvmeSAJk-1778590244.372432-1.0.1.1-A8L6PIqIK3BrU9QaRFqdboScNCQr7kOoekOuOTi4huarw3ZIETfKFjPawhT0EWIZcJ8k7xqLYfDl88FbpQ3lynuCghjE67zgSj62GPuxy3rOjGB_qjAf_9SY1vXNvRxe\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Mar 2026 13:21:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 12 May 2026 12:50:44 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ztibDE7FOAPf5VC%2BQ4BqKEoS2JRPaQq5IicyTC%2F%2FfHt9o6APhpsnrIz6ArsmyqZj7Ogcm3VFeep4AGqMeGq0GnbwcUuwsgMs2vgJKQzfBFihw69lnSv5YJ4YgDyw8ptAbEMeUZ1pt5VNIdsR4qXskTRfVHI%2F%2FA%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"69aec960-3da0f\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d060dac56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252431,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a1a23321d0a7b81fc124eb474f519164","sha1":"7302a4790a11a55a39af27b5c5d95391f36c7449","sha256":"ce157be72b0feb99d83e0ecb45dee49f9e8f69330da84cf33d65c8a80c297a63","sha512":"d6277696b3f9808906a75fa273e27c5777028965b625be99a466119e25cba96e635598bfa686bcfc065bb901db6dbeb2262b56012d65014d784bebc2382b5815","ssdeep":"6144:D1Osubz6j/kbklCp/5Kbb09tg8KSFO6JxC:BkbklCpxKbbCtg8KSFq","tlshash":"8e34944567f11c2752f6b0f94b0bc1d6722ac003251a9c8878ad73b85fcea7896f5bb4","first_seen":"2026-03-09T20:13:42.687398Z","last_seen":"2026-08-09T00:47:56.549072Z","times_seen":170,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/517.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/517.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1781\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jun 2023 14:01:19 GMT\r\netag: \"b7431b585babd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HNgzP7Qm%2Bp2Jp2i6KynZTbQlu%2BeiFdHLzI%2FTIzZntq45iZoHehRWKVXwSuCc%2Bf29uiLjgbcUQDwuwoJpkr4rZBmLE6bH1XyrGksXUif08CuSAVnbd%2BngJGJ85ugNrX1ap6641eEbWop9wqS8Gg%3D%3D\"}]}\r\ncf-ray: 9fa98d0d0dd456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1781,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"6a30df6a4cb5155348f9b427b5aa9534","sha1":"61577e830bc72df928ba6d84fdd735e9c270972f","sha256":"dc8523c799b28ee4e416598d9b6597d431eeb6c590ad02e5bb1d1abf83ad6471","sha512":"b23c4d4a75162434add3d516391963f0f4a5a136d554b42413bd3e10597f77bc0bba78cc1277ef58d167db38100ea1db4a92b72ed0e1c3f0c07b0dd755d0212d","ssdeep":"","tlshash":"bd312b559b9840ae20e6f043563bc141746c91f331a8e9ad6df8e3fba2d24e558cde82","first_seen":"2023-11-04T19:13:32Z","last_seen":"2026-08-08T13:53:53.859627Z","times_seen":163,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/1/2236.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/1/2236.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1298\r\nserver: cloudflare\r\nlast-modified: Sun, 11 Nov 2018 13:58:14 GMT\r\netag: \"e418197c679d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5sLZE%2FbsJvqHb%2BF6a7NFUHW3InJwlTvZrF2OHjozqqSuX7lEGn6amyu5NSiJyLStMAKNud3nwqi85hkrOH5B99f%2BBFwTi70qtG6z%2F%2B9sTbZK3QzwpBpuEZyg5evm7ptc%2FIjBAsKRZR%2BZLL%2B4g%3D%3D\"}]}\r\ncf-ray: 9fa98d0d6e4156c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"95f033265724470ae2952c1ee0535da8","sha1":"49a3b2921f85f0a6a7e58d72c642abdf8cbaff15","sha256":"42ea45bf035d70a192eb960fda7a480bad6e4cb5810c8da4412a6933386c56c6","sha512":"f4978e138ce7eec7b69e719e55340e2afe639c4009f1883afadf679358df042e0d0295268dce9da9af9beb481f35d4474cd6efe6cc834bb01f8921deb73c5eeb","ssdeep":"","tlshash":"552195fbae9c81895f1584f0cade4261c4a3e2b6ed8ddc56790c8899465dca882602cf","first_seen":"2024-12-02T03:48:18.463175Z","last_seen":"2026-05-31T21:43:31.555461Z","times_seen":8,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/walletConnect-CiycSUBb.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:12:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 968\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4JGMTxl%2BDAEp6br8jCKDW7bNY3Y8hXU2xLHGsvhkTBQxKeGDvwX0xEO86u0Xyy3gQWgnWZu9tTAJ2vpdFYY%2F6HTwSVXK0OzQ6MMfLPfzXjvVPPsvQK7%2BkolfxdYTVi0%2BxrizA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cfd5ccd56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1999,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1997), with CRLF line terminators","md5":"8b7c6c60fe7ada749160139c01cca4fe","sha1":"a6aa718e73afe4c831661d7c86cb4a8cf5f3078b","sha256":"0d26e1e1ecd21a2605a661c09f9a3b86fafdaf555c547fe108ef69e8a0257d12","sha512":"08a9dee9da29e1d216a8eda3c167c2ffddde30a9730a36b5bd9abca8aa96271bff6014bedf26efcdb1fd7e921e72b4ddd80a1042555f050e48a0a9fd12536c42","ssdeep":"","tlshash":"7d4153ed9a14e5fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2026-04-30T19:32:29.837535Z","last_seen":"2026-05-14T23:49:57.324846Z","times_seen":6,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/flags.png","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/flags.png HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index.C0U6OaZb.css\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 09:02:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94974\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cWHw7usn4j%2FFAjDlrVd8uoD0qbHkKVLeoz9dtdD66XE7lIJibiIwdOd10kmjmuMjA5v4CHRVYBjyazrgDRKa%2FcaCPv95w1%2BozPc5qtDnB%2Bnm%2B9FEqVzaKYKPojwKn%2FMO4k8Z1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d019d0b56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":94974,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 17960, 8-bit colormap, non-interlaced","md5":"02c3b5af3d0ec1f21c51bf21a22241e9","sha1":"c39c097d704c754294e3fbed23b80e502054396e","sha256":"1c0578c469db9a3da5c0b6fa0258f99b2a2ac602d0027ab6fcb7b218c3acbb75","sha512":"bb097e3532e83aa4db8e8dd7cd16d95d83ae77f4cc19207f04f3b929ca695ebcd7f5730e9ea888763108c95028f40f81490a03093ef8d57665c6f4393091dc63","ssdeep":"1536:wxq8h3gUrI89XxfLcduXa08ucH+te2RIr8T8hKdPzgkjM+PDRzSKR2JLDpzm5NLX:Sq8h3e85FquXPAeExk8odPFg+tzSKe3M","tlshash":"509302ab06de36c6e10b2e9408902d3c720f65fdcba545ad497cc743d8e5a68d48feb4","first_seen":"2025-12-12T09:55:43.277784Z","last_seen":"2026-07-30T17:46:53.0994Z","times_seen":839,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/useOpenLiveChat-CypT5USk.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/useOpenLiveChat-CypT5USk.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 342\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yuveo1%2FvVlzcYx4Rj8eIRNWbLfq0qiKz0maf0OXsqZ8fH%2FxZ9MhAMpoibMAunmazwY76PWnk%2FZLy90W%2FmlyxV%2FlSu%2BLJPkJqoPBlgtIM0yon2eQIYz2lIQtTr9TrgElsHvjjzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d022d2a56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":584,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582), with CRLF line terminators","md5":"27380365e4a578b11a7919521758e963","sha1":"3bfe048899862ee5bb0f4b66dd6a417e9d7c54d0","sha256":"85806610d74d2079726ace5bb5c8a44759e5c9f5fd4c6c040e41f96cbcbd04c3","sha512":"cb4d44bd5c744ed19044690fdf2df0d90d0c5db417ad79bf326a57ed12337db88b81df667bb76f506a0b5605506b362609bcb2688020ccb97e69b473e1511b6a","ssdeep":"","tlshash":"6ff0e1de86989e7c80c09ec1515ff4f45b3816a4740dc441a43e3cdd642480586bfc6b","first_seen":"2026-04-30T19:32:29.842561Z","last_seen":"2026-05-14T23:49:57.437801Z","times_seen":6,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/NotificationsButton-CRcMibFE.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/NotificationsButton-CRcMibFE.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 349\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4BKt4Ip2zYcnB3NUK9oGs2%2Fn75FyMKzO26QHPa5fmmI2j0Cc4a1yUbsuXady3n4sX%2FGZElTNco398NOffI1NqwepHCfoq48oQAtXfMiHCfbLT6x50Rdj0h4ln3rOa8fAPz3xqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d022d2e56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":559,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (557), with CRLF line terminators","md5":"edecb46fb8c55da0a7522275eb1bb505","sha1":"299580befcfbde53484f33749d4da069d1365518","sha256":"a82ad2ef453a02afe40e25c07582d9ad7b90bf979f71d63136e0f0d037402212","sha512":"fbb3336004e0b299a6c288300bee290f1e2496f821743eaf3e8a27055a6a80b9e00c8f28b96b96bc07eccf35b10a9c68e49a16fa537aec038ca421e1bab319a1","ssdeep":"","tlshash":"8bf0208be998d9f41b820910b32bd015383ab83cef4a688000ea2c58233005a895f94f","first_seen":"2026-04-30T19:32:29.731645Z","last_seen":"2026-05-14T23:49:57.388904Z","times_seen":6,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/jackpot-jNbP6Duk.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/jackpot-jNbP6Duk.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/JackpotPoolsWidgetContainer-BUz-kRPc.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 243\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AlZwI78zJzriZHUKLHMxgOUQR4IkTFzSf7l8FoCgSi0hTWlnLgueJaH%2Fyo%2FB7UcuNc%2FhPSjdl1KRGkJGpDfnw0z%2BoB4TOMlCwng7qw5yn%2B7zOOxW6rs9JN941QTcYC%2FuTHtwyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d062d8756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":377,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (375), with CRLF line terminators","md5":"58c6b0b11883e69b52c41fb6969432ae","sha1":"cadf0ed3f23639098da9ed2b570cb9b949fd260b","sha256":"efef501e418f3eb97f1e4de01c024b8a3e930e7cde7f2019cb209994eb608bd3","sha512":"6669b90e56e649504100d1dd9dd52d1a9481406409af6c014f8a4c02e29841d6284f1fdd26770535194877e9586c983aa5c17227a5d26b9fdc3354616e3ee719","ssdeep":"","tlshash":"e1e068eed8c08dfb967007552bb418840e2416ca101ec9e4be2672612800b8828f8239","first_seen":"2026-04-30T19:32:29.843557Z","last_seen":"2026-05-14T23:49:57.413027Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/BetConstruct-Icons.Dy6tH3mM.woff2?6reyr0","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/BetConstruct-Icons.Dy6tH3mM.woff2?6reyr0 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index.C0U6OaZb.css\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 09:02:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 419348\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbGbdkng5tlkmoFQqpQ1aUHL27xHg9M%2B2ZCMTGsTfJvGi5mBk2IMAIQGtu243ukMcpLH%2BpD79kK4H9xEjq3bf57omzNNWiLXyHp2yCfUMpRQoV6i31DT2odGWDtZRbuIlyOZ2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d023d3856c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":419348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 419348, version 1.0","md5":"91ef689a7ad9c44db5a0ea5b335e2a8a","sha1":"95d709458007fe3bd685c4fd4b08fba18ab48f12","sha256":"693bdc228f3727c750488c69c6fa33603b942b2f1323cee69a72523505fa17b0","sha512":"caf132e4c3d843687a0d60de1fb0988dbc3ecbc2ddb3f91ce24879a02c65323721fcf0430290fbc4787791df29e6b5b374c60cccb455e175a00003ecf920391f","ssdeep":"6144:Fyk9JZQ04vwyq+95Cgsw5X5qwPlfCkm6S/aBkFJtpU+i6/sZfLyi6J5T:BiTvPYgsJq1jT/w7l/sZfLlWh","tlshash":"849423c52815faf2c078c0827c4adaa264c429ad1396b09afc759fc7db53b8c09dfd56","first_seen":"2026-03-26T22:06:57.611328Z","last_seen":"2026-06-11T20:16:20.889202Z","times_seen":167,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_1ab097485a15c67259ba78e8d9d8f8df.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_1ab097485a15c67259ba78e8d9d8f8df.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=wbplXKCj.s2r4bhs.1MDjZ2iCaFlh3N_S1orvmeSAJk-1778590244.372432-1.0.1.1-A8L6PIqIK3BrU9QaRFqdboScNCQr7kOoekOuOTi4huarw3ZIETfKFjPawhT0EWIZcJ8k7xqLYfDl88FbpQ3lynuCghjE67zgSj62GPuxy3rOjGB_qjAf_9SY1vXNvRxe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 231710\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Apr 2026 11:05:03 GMT\r\npriority: u=4,i=?0\r\netag: \"69ef42df-3891e\"\r\nexpires: Tue, 19 May 2026 12:50:45 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MjBsqu6qdCuv6kaxWr110GnVPDpoVpgGWazh0Kpm2pA6OtZ2ahGlZacNzyIly8NIucT1xc84q72EGh820%2BVjzxS2bN9vr7HWiSwB%2FFmXfWilSLmSPC6w25j89%2BR0Lx33qsICovujpBw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d06e96176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7586f35b8d93a6151bd60727ee846965","sha1":"c8780e4ddbecc0dbcca565e382c51a653286f7ab","sha256":"721bd560d79908e5e2071cff2f8c0e6d225e60eb76952fdc80e63ffeeb163e28","sha512":"5dfb0cd6b301585c6630b1fcf2714d46d62235a5c26bde0446979975ce6ef8d1e72b36d7aae73384274afaa1516e9e7bba3bbe5b8bb6230ba44beb51e6c723a7","ssdeep":"6144:ZRte11rPNvWUrWr9hip8SOapRZfn6irqOyPok1xHuyS:ZerFHrWrzftaP13qrPo2i","tlshash":"d0342213004d2c9a791c2585ed1ee6bef01f7ea8db3107d49177119d9d0ae8b81acf9e","first_seen":"2026-04-30T14:14:09.190566Z","last_seen":"2026-07-06T22:32:46.64491Z","times_seen":8,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2472\r\ncf-ray: 9fa98d0a386d4c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfSFghIByqO-qpSeiAGASfCVErfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=17+5 c=0+4 v=2025.5.1 l=2472 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9bbc32ce28fd80253987f2e1f0be287","sha1":"ac50a6c9aaaa9a3fd32f610e9858fecee25be6dc","sha256":"9b9632ed8ef4f6d25483053b956d22184ee488efd3f8c22e0ef2626b974475cd","sha512":"5863d7231d17d3edf58896ef5332bb631d9a5c27d06fb934be7653a6847b8918e92ccb66090e97c8b96f5bd51b3c9ae112d2c4eb9407cfe8f617da98ea3d3dd0","ssdeep":"","tlshash":"f8513b2e28bac5e8bedcb4ce2f90883a3283b7511ad4c45552d80854e35fb41a1db0d8","first_seen":"2025-03-01T08:57:15.902828Z","last_seen":"2026-08-11T17:08:38.068444Z","times_seen":2832,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png","fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-05-12T12:50:45.858Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1\r\nHost: 02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":136,"connect":9,"send":0,"wait":0,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/513.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/513.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1364\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Apr 2016 08:12:43 GMT\r\netag: \"ded4a394a59bd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLPIZRPziSmLtW6iPPS17ftxrih1IzbvtiwmymQ4Db%2FEKXLOBeXvIM73Rafa4uKOx%2B8KFhkdEdMAppxpvN3%2BUJGQozxIUQkL7oeirm0mIbtHVDNoq4MN8Jy2Vz3DwIebBGbUWFb7Yus8gO6ASA%3D%3D\"}]}\r\ncf-ray: 9fa98d0cdda756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"799214e3c123c2c234529cfd3434a773","sha1":"7d3184ab131039863c128a769a3d9fb20f40b06b","sha256":"d43b999acec30fa2dc263e01a731de5cdccf7c3e0741c89c569e4aa804da7934","sha512":"2af226456fd958eda6772503cb1177afaaae8c4c97ab7dcd06ceabc83a4be3385bae5780a00341eea6a387c09335af2643d4d469c1ef132e049e7753e89d1bb8","ssdeep":"","tlshash":"e721d8799490c0b8ae9412d7957b9a15dae520eee051e1ce7e72c69c452c2458387cb3","first_seen":"2023-11-04T19:13:31Z","last_seen":"2026-05-23T17:36:46.411089Z","times_seen":162,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.galabet1074.com/storage/medias/galabet10/media_751_609aa2021173dbc7867be74ac403fadb.png","fqdn":"cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_609aa2021173dbc7867be74ac403fadb.png HTTP/1.1\r\nHost: cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=qX.LimTLO.s3W_fndTwRDzqGGOIV8FrPAp2EILEHE98-1778590243-1.0.1.1-CqbXymCriyApEVq2_T8QmDKl.LlPHzsGV3wpiU7m_Pq1wCdiqMA_Z0.Gkrq4O38LI3E2YcspcW2j8wWY0DehHU7ENyCT4NNfLpyWi5hcqdU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2609\r\nserver: cloudflare\r\nlast-modified: Wed, 23 Aug 2023 05:40:21 GMT\r\npriority: u=4,i=?0\r\netag: \"64e59bc5-a31\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=4_Oj_ZefQ4gnJnrUyBr3Yx5_YElcMGjgdWSwR1xzm1k-1778590244.3728762-1.0.1.1-gUCu_2yPEzZz1051yVtzdDlqq4t0aG5TIWvj.QbIttWIBv_fGjjH7wsBPv3YBlILTIxn.nTjpQrP_uY5wLyr2io44kAXhEP5lt27zfAMBChlrQ6UTDQJrd3pixral3PC; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHo32HqDb4OxCJXgoST1xHIVxeup2k5DpJFy1t4IvwjMduwpjvez%2BqpYKg27UrmO0itL9i9W%2BN0d9%2FQ4N%2FD%2Bl6hJ0WWkHm2n4ORUIGFJ2lcAjl8WSxVVLj6aR2tslHNDoxtV7t5f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d035df1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7081c9d3ea2a6fa19a82d1f725a61d11","sha1":"3c161f97bafb034eb192b0ef890a5f2e4b3d39cb","sha256":"61390467d0ee7bf0ac7253d9128af3b18943ddc4effe0ef415b1d0ab9e4da2d1","sha512":"0c2e13235adef124de8c8fef5009e25cd362690a5865db9e3ac68b80d9bc4f6e30f13880416a42206ea81cd932ca17912a2bfeee7ade6f647b0c00f46b376a39","ssdeep":"","tlshash":"ab511cf531120e38d6a470339d16dec67804b445c4afc416f992eb2d3da61a478cbdb9","first_seen":"2025-12-24T22:39:15.996531Z","last_seen":"2026-06-06T23:43:56.124757Z","times_seen":54,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/1/2012.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/1/2012.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1394\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Apr 2018 11:10:45 GMT\r\netag: \"6edc7d6318ded31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSqNWTgcqu4R0SDRbeRAkSQgbaZpXEu%2FYYppQlKQOxwNly0Hu%2F6xUZM7ee9w6Bg95Q9Gx6I1omNwedNVT18NbzoLJe7fCRwQcz6uznkVTEJEUnQa%2Bb9sO5HleCIwd1dsB96Xwgi0GfjifSm82Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7e0d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1394,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"44908dace21c206a00e82325ae2542d4","sha1":"94383bac09dbdbd1cd7e5efe0549336131567519","sha256":"bc035918385e9174b3956d938e3e6282f224a214954e7a8647f27ce2e44eef01","sha512":"8a549692838f79b91f50220ff537f567a3f161b2c19cfadcff3e3e81f1ad7dfc7422d9a9bd0e573fc50d8a886bac13de4a76562fc124864444cff20905680036","ssdeep":"","tlshash":"0721d88d40c71ead3c585419b2ffae86c243807e42867836d571f12a3d26765c21beeb","first_seen":"2025-03-18T10:52:19.87104Z","last_seen":"2026-05-12T17:10:48.427039Z","times_seen":14,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/8667c4d42dc59866a3eae464e92b49e5_casinoGameIcon3.gif","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/8667c4d42dc59866a3eae464e92b49e5_casinoGameIcon3.gif HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/gif\r\ncontent-length: 941908\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jan 2024 08:59:17 GMT\r\npriority: u=4,i=?0\r\netag: \"65b768e5-e5f54\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=POOK7i1OclpB2naKKr.r_L70dXE5KIKayY1X6HeKBZ4-1778590246.1970024-1.0.1.1-h4MCMzeXoIpTaQcAh1IHFX7WQWIIdey5bab2Vphig_9t.CLaW87DKtplJoyKH0ceBKaKEv99GXr7ZdmBr1gQ4wSjnUgXVOgVLH86.UJs5pkdNFrZ6mdGW652pvtK21T.; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iCuh%2BkxKmZvOJHuaxX5a55xa4QRt7E9JySK7oQ0mNfR95E1zS0qSJ87RAFabt8eTNxLaVZmvKYRbGZNCfUbewvZT0MuMUf5ifAbfNPvj6RhSPaYZfigjmlvdMxSLyvhTZwSs6Aqskng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0ebbb176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":941908,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 440 x 310","md5":"4fe767638d0b12ed3be0ca21efab6487","sha1":"a8c0ce094cde71261c0949ec078760d38c9b4594","sha256":"6dd7e8024861338595d9b63de9aee3cd43403d8e1289a9c99f68f5832ad4f40c","sha512":"3972a1b9e8a770c65926a5fba1237cc5a9fb5f114bc7ff4ecf405962f38c01b6e8bd2f1c71520c6f31ea86cc1277145243af0bb75ce115caa5d05a700e855f8b","ssdeep":"24576:xjJQ1j6Aq9D2M1W3L0bl6sqtgsccXsin9W+Jclwcd:RJ/Aq9D2M1U6qiscc8hu4","tlshash":"8b15331e564e8ca9d44692fc4cc875a15944cb2184ae8f07f745fefefcba90835a1ec2","first_seen":"2025-03-15T07:45:56.788807Z","last_seen":"2026-07-30T17:46:52.788432Z","times_seen":93,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-D196OAK0.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index-D196OAK0.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1305\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIcqIcfJypxtEfpPZT5Fue4dNnTvG%2FwwzCwQpTOePyRJbPpV%2BfoPgSjA0QR88Iko0x3j3hOeo%2B54PNV9wJqpWcGM6M1vrn%2BM5DQ1Kd6RUYLtBRVrTrPmhDIXEdFVxki%2FsNlmHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d0a4dc056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2924,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2922), with CRLF line terminators","md5":"79e14a887ebaf995aece24de6d9a6375","sha1":"8aa8ebca8a6cea888e01a0a636137d19c10fbe2f","sha256":"79e6f732c62e0067b45c23e42e0665810efc219857d3675ecb4889bcd367b495","sha512":"69facf495e6f8755ee70e88dfd4cd59dea2f00f0a756406a3150f68851d295f13baf72be09134b97e78b153c80f085322c03aadac85872eeb9fafcecbbd7fbdd","ssdeep":"","tlshash":"3a5142c7a042d6b8bfe708e6429b10b070374d5cfe1f44d092be58964998792e35bf4d","first_seen":"2026-04-30T19:32:29.874468Z","last_seen":"2026-05-14T23:49:57.361312Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/fonts/default/Roboto-Medium.woff2?v=505","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:47.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /fonts/default/Roboto-Medium.woff2?v=505 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index.C0U6OaZb.css\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p; _ga_MCEY36CK22=GS2.1.s1778590245$o1$g0$t1778590245$j60$l0$h0; _ga=GA1.1.1624701396.1778590246\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 09:03:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 73924\r\ndate: Tue, 12 May 2026 12:50:47 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNJa9J1br2GE%2BVQaMhuD%2FhMHlUuNZrGY7UeMu%2BavvwrfR729nxZtEPTeI4d6VxGk7qkn3JTM60C1vdjyhfzTPu9qrLB77XwjVEO%2Flp7%2FDEx8E4S4tjp0rCbtK3SZF7P%2FXUPEKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d150e1556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":73924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73924, version 1.0","md5":"582c115c3f8f2e13a2c97e6826471c80","sha1":"822180738ed9ad4172d4e8354b81ecb2f7c46bd7","sha256":"9942fe6fe9ded7ab37fe4760990b57f5f43cebc438bf1bfe139c8b508acd424f","sha512":"03b3156c154922f4735e7b828d903c3400b320b352dda9ddb478786d8820fde8e9707cbc45c5e1282059994d65ead8e4987f249afb38534dab27ac59099c6f58","ssdeep":"1536:ckbrpZ5asBRVQFvoMJapYaiDKq4OevyyuZr47+uU76etJD5S1zYItyh+SlOUrfeZ:xHT5dBsRFuWKueK5r4SuU7DPS7yOUtRQ","tlshash":"a673025117a10b2ae42d1770187ebfd421af013ea2f6a2b0fbdc958f6d795bd0a74311","first_seen":"2026-04-05T07:31:10.885369Z","last_seen":"2026-08-11T20:15:29.101572Z","times_seen":382,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/BetslipButton-q9-vX9A1.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/BetslipButton-q9-vX9A1.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:09:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 283\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WnUn72Wc9p6oIn0TZJhwSrgoA9g84pLNO3%2F21K82GAJfNgx0W93Zmu7WvIQIVa5pzLS3%2FJvzGwShtAdxmonCgfxQbA%2BtRby4ZzNXAF4ypf%2FGo%2B1Z9YkMTbAUjqcde%2FmM0DIl9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d023d3656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":419,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (417), with CRLF line terminators","md5":"c7e4933f244dd63f3f281dfc36cdc554","sha1":"6a65fb5c6acacc9b732e5735d500faeed0a8a911","sha256":"6f39a54faf2294afe759db36bde99d4bb525aa65b739bf1f29853220ebc0e802","sha512":"d9337e5334baf246a9b29aee8e33274fe7e62c96f90180df21a07beb8fbbbcdfe2d707cc1950d727472806f6c22f594219175a9eefe616fbff7c94e382820dcb","ssdeep":"","tlshash":"14e0f186c848c3fe07461d81320ac101382255bca344f5d280ee7c557f7458acc5f92f","first_seen":"2026-04-30T19:32:29.932641Z","last_seen":"2026-05-14T23:49:57.519182Z","times_seen":6,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FastTrackTracking-DmVUP1HR.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/FastTrackTracking-DmVUP1HR.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 624\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZVwpgsnhLIBwmS2in9hQgAst3yOCilP4ZvMTG40hfvcKvrc0NtRAvFz1d0wL%2FaSrWNkQ4%2BPCYqMxXlUIuFmsyd90zSuo8PU4WtEpUGBnV4XXIv8U%2B0MB%2FZYwZ5mo5kf8Iy%2Fc9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d023d3556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1386,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1384), with CRLF line terminators","md5":"56377ba0e97960fd1a4d140cb62f1185","sha1":"d67bbe6159a30c317109e9bdf7307f5e7578af85","sha256":"90d67f8259fc2e66a67ff2b4b6d3e3938d36818809dd64fbbe031d84fd5c82a2","sha512":"061c6a8987ce7544330fb0365c5820af1d11440bec1f1a7286e4e5071e8f9b506e0ea4cebe0133604241e01963f62744f1c2e841137f32054b60bdb6e101b55e","ssdeep":"","tlshash":"0921110f80f482f97c900e4e63e7e2a0957e6579702dd4a3f17a0bbc3b1c245939a897","first_seen":"2026-04-30T19:32:29.944889Z","last_seen":"2026-05-14T23:49:57.336012Z","times_seen":6,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/InformativeWidget-DHYaBHsY.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/InformativeWidget-DHYaBHsY.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 608\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1v8JTDc%2FCQFwMb7fyZfq7B%2Fexv6c7fZqdouZ7mxRaoW3bHpp8lZ6IXC%2BrUC6NvZ4isxglhmGmIoYnRvPRIIwIOr5SwXdlMbfqWToUi1usB%2FWmURFrkJte2QaEB21MZRlp6f7bQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d043d6d56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1088,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1086), with CRLF line terminators","md5":"bb76dc741d1d0089382476835673dc44","sha1":"b8b5d782f8b1129d15d1dede64148000558f5782","sha256":"7f4e527158d0ac25af914aa9386c6a279ab50ab7ab6e4a5f0a46b57a7e8c4c32","sha512":"4cc9a253417392505e3f8df422a82a4c80becf1cc92a4e47e29665a82a425942c0ac97156322e9f577579e2b2cfdaa7a917d963999934851919141b9552a1787","ssdeep":"","tlshash":"c3117586f594d5bef0390dc44256d0946a212ee4cf38e4e999b5340ca87410bb7dbbbc","first_seen":"2026-04-30T19:32:29.840519Z","last_seen":"2026-05-14T23:49:57.328562Z","times_seen":6,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/1280.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/1280.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1733\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jun 2023 13:18:27 GMT\r\netag: \"24256c5b55abd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9sOTK13ja0uQ%2FEvuDxAcohlQCs8XggYq9u5pPCGRW2RBMMtKBl1c1u2lZVBuLZQErFKZ9RyCJNJqzW4LGBAuqFwX60ShJ06yQgVQK2t0gWZyWwClvWWT%2BjXpuPskwTN5fS6%2BTHLXyN%2FRbI0xqQ%3D%3D\"}]}\r\ncf-ray: 9fa98d0cdda856c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"de50b0c133bdc458272811664f88da96","sha1":"bb13f483934ab5761a0a0eaa4ef0255f8f5cb775","sha256":"8fdfbfc2daca83fdec037d63a2226bdc5629a4033f11558ab34e7b9e3f2e9a17","sha512":"dd3055c4b794b3ebea1b3793b5cc6414b9c2f086c3ff4d654f5f26b3b40615ae5556806e5f92ac44632f095f196600b8419c304e2ced5b9a097fee5b91aba578","ssdeep":"","tlshash":"1e311d726df428f50dc751ff04ad51785035ed9ddad210483d50c42620bb9ce52b5c87","first_seen":"2023-11-27T06:31:39Z","last_seen":"2026-08-01T05:50:49.392066Z","times_seen":145,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato|Lilita+One","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Lato|Lilita+One HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 12 May 2026 12:50:46 GMT\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2f31f582a62929942285136edb852eb4","sha1":"ade05009e3f52242452d23f325d0d60eb2f4945d","sha256":"86d1d33f6f9e190954cb9cf8f930c7ce03e60bb102b64f2ce0baab352285acab","sha512":"2e4b5ff5cb64ede4c3e63e2477f156c55597e1c3ddd83d888fd96c66bf7cc6716dcf522fad19cdde2a4a564f530022feaff488500797d01f3673e52e295ddabd","ssdeep":"","tlshash":"6e31bf92097ba80497930dc212ce7d32ef1e62406845a825afff18dcfc67c699362b0d","first_seen":"2025-09-20T10:36:49.753015Z","last_seen":"2026-08-06T15:21:02.771789Z","times_seen":174,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":60,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/LiveCasino1.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/LiveCasino1.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:11:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=kjMk6itOyv.HJHckQy2i8dTjLEgML70ktTcNFrULh9o-1778590244.1400752-1.0.1.1-sxYXHXo0ewrjuYLM_rFOjnfGt2A8u19ehwfYnk.aZ4XEoWBv.3KsVxdeKFha8tLwbPQfwIFQtWAeMURBtGph.Sx26UpS0LcuNfwXcc54ms_MOk5mI7C1zND1bPMSTzXr; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2i94ay%2BZU1GMBRRzEvEOU6zXG52dstMmst6%2FU8MGaxHCJfMGlQWGGDpllx8rTA2%2BFqPVzxBUN7ReuqKzOFWMGfK4oYdyyTLY%2B0Kv89GulrKbeRIiW6H3a7SHroAY2xfEAwZrg22xdEE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686270eb-5d7\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01db0bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ab76ddacc7177297110531bdc4b7b09c","sha1":"9e3a3721140685f8b095694cf6690ebaeac63278","sha256":"67de7a9984a8f57a460e025368985daf653eab425caaa5482cc1f3af17c43104","sha512":"16ce040d64e0b45e159c5a0bc2ee0ddbcffdf3405d0ae5dd70b5d1297f657f9067b8cb03a1e30811720c804e7997d3c57815e9b3db2ace852941fb2a7900ea13","ssdeep":"","tlshash":"ce316de876b0ed7c5c9d3a9ea7195d542c9ede6921007ba5db0c8c90c3cb4089759c8b","first_seen":"2025-08-01T03:40:47.847838Z","last_seen":"2026-08-12T20:46:59.255587Z","times_seen":1070,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":58,"dns":40,"connect":4,"send":0,"wait":86,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/InternalDataspotTracking-DK8fDMbr.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-DK8fDMbr.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1728\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jx2z%2FcT9gx0U07I5VsFSfgPpdt5dxZP75UNKYXPm6FtPNiIAk7ruohILRKouvKAXcKPboZwpy85qwLcpjwlW8T8pvqz%2FKd8LGPXXzc6cqEeio1GIL2mnlf9ETaNomgEnag2Lgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d022d2756c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4866,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4864), with CRLF line terminators","md5":"cd08975446a190db000d5d79ba28ae42","sha1":"fa2ab04876e1c5eef7e0d4bc32308de889d7081e","sha256":"8645f139380371358e71312a5e6d91a01419166e2af17ae5213e536a23a3513c","sha512":"2901dafdae97a1cbb92c8aab581f7e62ead2f0112f4415ad627dae314a55195ebe45ad1dc751c588f2ea49ae39578f64964d009cf5b8b5a625494599e9617ff3","ssdeep":"96:SBZUCVtfJREr2Cv7CvXvqvxGr9qCtz2T7TGgZQ1bZmn41+pnys9OtmksEZRtifh4:SBZUCVt7ErNvuvXvqvxGZpFCHVkdy4wU","tlshash":"35a1741fc83c04747051c5dd587796abc2bc7c999180c8f0a02b9e6a621be09d7f6ea7","first_seen":"2026-04-30T19:32:29.755311Z","last_seen":"2026-05-14T23:49:57.382329Z","times_seen":6,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-D196OAK0.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index-D196OAK0.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1305\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W3wmiNaG0u92asH7ymKokzZO0EYC9XphmKvmg8AkuEzsBDfx6XXCt%2F91cA3VSWwVKUwkWc3oqewV0SiAUe0U4OKjW9a3irCwgyCw%2BYTKr1EfhF0ie%2F%2Binn8shwJVdC%2FoROZjWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d081da856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2924,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2922), with CRLF line terminators","md5":"79e14a887ebaf995aece24de6d9a6375","sha1":"8aa8ebca8a6cea888e01a0a636137d19c10fbe2f","sha256":"79e6f732c62e0067b45c23e42e0665810efc219857d3675ecb4889bcd367b495","sha512":"69facf495e6f8755ee70e88dfd4cd59dea2f00f0a756406a3150f68851d295f13baf72be09134b97e78b153c80f085322c03aadac85872eeb9fafcecbbd7fbdd","ssdeep":"","tlshash":"3a5142c7a042d6b8bfe708e6429b10b070374d5cfe1f44d092be58964998792e35bf4d","first_seen":"2026-04-30T19:32:29.874468Z","last_seen":"2026-05-14T23:49:57.361312Z","times_seen":6,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/1/2244.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/1/2244.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 1347\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Apr 2018 07:36:58 GMT\r\netag: \"d56139b7acdd31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 11 Jun 2026 12:50:46 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDAklDXuPl%2B9CDCt%2BArglcs1xEadUQixEALytwH4woNqwUDjpStZWpz8OmVUoBaQWkMEWVL9ITb9nWpEEuN2aBdH5SRoqm8TFnFvbBuFveXIijYO%2BMQBIv14rcOVOgFhlzVSIzRHapRG7HVUiQ%3D%3D\"}]}\r\ncf-ray: 9fa98d0d6e4756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d06c1d39206b5008ca91aab72907066d","sha1":"435aa7ab8887c69695c8c09378ccea78e4d32008","sha256":"f1f14b29114119f4a225bcdb01e6686b193a6b0094956b507f287e6e267fc836","sha512":"ad868e28658a704ccfe7525668e82dc1580c8cf73a07bd5ad2b401dda3672aad8983216223f6cfbecab7be728bb58d05f3b779c0d6930daec6e4af57c05e9da7","ssdeep":"","tlshash":"9321db90ac89a4b0dd9ec374fd57405c75f1349a85eb9d0f15a183350ef06355abd732","first_seen":"2024-05-01T04:59:44Z","last_seen":"2026-05-12T14:21:59.737208Z","times_seen":14,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/v1/projects/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/settings","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:47.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /v1/projects/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/settings HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 740\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Mon, 20 Apr 2026 10:14:41 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: CKnE58i_wQnZHPdUbktjV15jS5tSoH84\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 12 May 2026 12:50:49 GMT\r\ncache-control: public, max-age=120\r\netag: \"f7df2cf67c32953fba2d55755ff57614\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 16015e09e0d70f7cc17ec5c4f52b310e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: BgrlBOfBNaGoe5gLzozvu8kd_okmxtWheL_MORUu4TtIPpiT2diJAQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f7df2cf67c32953fba2d55755ff57614","sha1":"c008f77891685a384d3dc5907c3732c7576a0998","sha256":"47e40399bdf44be2a456b6f886c5ccdd5376790ded661a92c27cc0087bd4a860","sha512":"5dbe175ee3d1a964c7f40c47a2fed07aa0e766340f3bdd5552869579b67a7db38b9d4cad14f5f2e98b5d5fb16b87936c3b41a83cd70819dedc347124fb0a1a63","ssdeep":"","tlshash":"4d019c8c3420b1b38d5a8b23ca197d036ef648781889653055be5b0c007e9ed039ade3","first_seen":"2026-04-21T12:24:49.065403Z","last_seen":"2026-05-22T17:22:58.201612Z","times_seen":21,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":47,"dns":35,"connect":1,"send":0,"wait":521,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/dynamicallyStructuredPages.json?v=1778590200000","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /dynamicallyStructuredPages.json?v=1778590200000 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 286\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtuWVorZxLS9oqi4jLFYCwuWAV9Cso5aRKhBpseZxH4wy%2Fz6PtcaLg0h%2BfLBr5lyceWjBqJG5d0Ump7RkHeE1rfw4I9E6DA2RN9ChKtbDIXsIsuLCLyItUmCFF9eROb0din2XQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cf80c9656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":764,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"61ff5ed77b867ea7b436a21eb8e5ab4e","sha1":"91488963a9157554638375ada821c4bb44b12dd2","sha256":"8329002355bc98821e6757dc86bd87104c3f79ab3fa48db2435c5d3baf0ec870","sha512":"e93a660a89166b2b4f17735c7ed67f95b3b333006596634a735da5159f605181c8a74bffe6924a82feef888aea5bab127c2aaf77685cd27efbd0d71b9d888456","ssdeep":"","tlshash":"2001493d3c10ceb4f7a08862d58167809992e576c7880c5c2cdeeb19c3ad24e1441b7b","first_seen":"2025-05-24T17:16:20.011585Z","last_seen":"2026-08-12T20:46:59.297138Z","times_seen":3031,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/translations/tur.json?v=1778590200000","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /translations/tur.json?v=1778590200000 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=abaJvzomNN4Nx3DFvYv3pIeS1lHCKrUEgQJt3lOqRfj4DiHAVSIdAD723a9aQBtiB%2FhnNPudIMyq9YAJNgX%2F%2BTyw7pH%2FCHeUeXzRqggBBcKfOvGZE8HdwhktJ%2FFwd5wdUuRegA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98cfc1cb956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":200253,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63448), with no line terminators","md5":"6e01d31083e1a47dac14645043a27dbe","sha1":"f6fcd1c0f616fee35d520bfee78c61e87842ada3","sha256":"182619a11599b90a05fbfbad4ed5f98ac0d1dc8076ff9da0ca3bb777e703c719","sha512":"c21c48775cf037fff221efef8669722a8f62b46a1f85fc1f84e6b86396f64100e264dc65d677c1aa72480089f79775cf469c9e598a4984ba1f46a7791decaa5b","ssdeep":"6144:JeTHS79o2MYbsxplewkbxjQ5kZnHtjxuvy0ITxvw0jM:JeT2KoJlQ5kBHtjxuvyX16","tlshash":"eb144c05586e3cfd97a207ce74de9e66b0fa0283d150e416ed9dd63a238c767d22b90c","first_seen":"2026-04-21T19:21:58.116752Z","last_seen":"2026-05-14T23:49:57.390685Z","times_seen":12,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/___vite-browser-external_commonjs-proxy-B9AoIgFt.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-B9AoIgFt.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:14 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iE%2FI0QqJIdwCYUbXEiylqvIvs%2BtadD98Cga%2BSK8Etk4blBkc07ujCOO7DTSK0fTuG7P%2FilcnJC3T3ImLFuXRUSATKAxzMI60A31foSSRa2rVPA%2F6b9Q3zr142d6qlZfIDDSpFg%3D%3D\"}]}\r\ncf-ray: 9fa98cfd5cc956c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":179,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"fef88f6f37f64d0df82fb5a68cd0dcd6","sha1":"6eb3d8ae8ea34dd19374829cda9b4ae6aa4d442e","sha256":"5409b177a1223c505c46b6c633dc3834c50b2001e9e444d20f0779083c754c79","sha512":"8c08717a7134bb473cf26a6bb83dec4b50589eba04706c5bf1ac5c70a74733761d20ec107b38e864585b562a592f46f1b223b15540bb09b5f2444a7258095d2f","ssdeep":"","tlshash":"80c080495694dcf0528b1d828719d401d54c4d6db3f4f5f0bb4c9d5512025cb62b8f57","first_seen":"2026-04-30T19:32:29.761128Z","last_seen":"2026-05-14T23:49:57.432585Z","times_seen":6,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/Promotion2.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/Promotion2.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:14:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=eWOSiiU8rGuMrJzc6Yo2Lg1uGQFk.4bUmHRNnLkRbqc-1778590244.1391473-1.0.1.1-Mi2MzVYTrtOk1hceb5_LhDm4qghXe4iVVbklnQWcmZLnlo9kpyYOIDpU8YLYXRSvBSFa.TlRAteqAI0ToFs8vLbmYdhG22glHFTjcYUz0qoDa0fQoNaq6u9KrahKa_Ey; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=haFRbq%2BGYNfpJ5E%2FAgylddx70xHTH782S0fFfKr442eAVQv0jd%2FJU5GUTXBkuB%2FxJliUfuhHrKoXrP2vx92WY8cIZMHPczG2QsO296hv4aeXnm%2F1sFjw4nwd3%2B%2Bw%2BebzpKmnR83PM5A%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627184-382\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01db09b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"31cbecb2c7e793078b4a8e43100c2e33","sha1":"e073b0e09fcd4244f6c86b8f22206a46c4af9f3c","sha256":"a7ec0feda0f0f44aecb09628876438cf31a3d33de7393d25fc1b39d6251bf104","sha512":"6762313ddd6985ca71ea5e90b3a05664d0d1a3cebfafa6da07ebff76f62a3c9634d17ac226a4fabdc606ddc5c7c7adbb4628f3e0c8a30d5e5f96e574266d2242","ssdeep":"","tlshash":"7a11cce88739e7b438cd1f4f9a3d4dcf3614261a683de034e73eb9c4a61391c652119a","first_seen":"2025-07-08T23:44:04.701479Z","last_seen":"2026-07-25T08:10:51.788491Z","times_seen":196,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":62,"dns":41,"connect":1,"send":0,"wait":85,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/Mobile.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/Mobile.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=IUv9fcRyayWuxU027fR0ePDvVAAshUTipFssfV3fQLA-1778590244.1378515-1.0.1.1-xh1RVi0Mh2YkZ.WMHdStQEmkmlN7z4tYWNJE5aj9qrjU2IwCBPnHeWqSu1rWJfa9tMNxdSQrS8nusbKklB8vYUbcMykSUBCnn4gbGjpfoXpG6iQj9pXNKY.iVG._nox3; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTaDuJm9KYf8GNj%2FAo6ai9WYOj3emHyRu%2Bcq4H%2FpJhiFmtwxUpAgqwwpUrFocPcPs8dlqVQLHBTerHEEChDt5XYiY8lW7THG48cD3n%2BxH6gkZP2toGCPUSgj13bcffZrXAQ0c7lWx6I%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627114-155\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01db04b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":341,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b140aef15c3a0e2328970dbf675bda24","sha1":"77f0fce91e82379b75340bef8bcf39509d1c55eb","sha256":"08c2a0b66d7c329ce1e9e957188e98e920311984544c6d824a29cb8c73d668c0","sha512":"06c19a313efcafa154900f41bd864dc6bc5764a82dfaee82c91ec6fb360d61e0da1a1bb8fa6c58dd8a14f6cde01b85fe25e0ab56a9ba3009f4be67f99eb1ddd5","ssdeep":"","tlshash":"dde078e5b250d40ab5557d53b3fcd5a35e69f0d1da940c39713e791e0fa3034128d14d","first_seen":"2025-10-24T05:32:28.297874Z","last_seen":"2026-07-06T22:32:46.839395Z","times_seen":57,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/DepositCountTracking-DwXH74aF.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/DepositCountTracking-DwXH74aF.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 384\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aKzFhf%2ByZITGszHjVA3pk2IhbfOm4IFxKHCChv14qyTtaDCTP4lVO%2B2UoabokoAiGFHmEjp50fOoERWl0dTvVWsc%2FY1Dxf0nW3Qw0TnfjigMFfDWr5VYS0BOb0DHVPKk8PQ4WQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d022d2556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":646,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (644), with CRLF line terminators","md5":"cbaa5d0b6fc3e943a771aab2877cd463","sha1":"0cfaa5d01bf240321aa51c21c9f77c01e34b0be8","sha256":"2bf199a5dfc2dd746b047653bc39b450dbe3b5faf2d5eb4f7cf13631c051166d","sha512":"b1df73524587b2c4d7ad1c4d2c9ab9c61813e224082d38e6d1d25b9c8d2b982ac7d295cd67a3611d57c0900fa77b1c8a89f258ba004abc1cad240a26c943c5b9","ssdeep":"","tlshash":"7bf002971474d6f889c93a4472c6e8b367f1755cba23c4c781bd8d8a0349415d5cdd2a","first_seen":"2026-04-30T19:32:29.735839Z","last_seen":"2026-05-14T23:49:57.385258Z","times_seen":6,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/fonts/default/Roboto-Medium.woff2?v=505","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /fonts/default/Roboto-Medium.woff2?v=505 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index.C0U6OaZb.css\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 09:03:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 73924\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=veuyYyItkeJcOZPM%2BhG%2BRdzSpWqJBGDueWIp1TLviLKr0ALEleUdRcZXoMSfY0nvmi85VEMzzaDT8pGLVl0ikbZgsJes%2B4aQuhE8uLiQddrM2vQA%2FLmErPVrIGDwJdIVARZG1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d023d3a56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":73924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73924, version 1.0","md5":"582c115c3f8f2e13a2c97e6826471c80","sha1":"822180738ed9ad4172d4e8354b81ecb2f7c46bd7","sha256":"9942fe6fe9ded7ab37fe4760990b57f5f43cebc438bf1bfe139c8b508acd424f","sha512":"03b3156c154922f4735e7b828d903c3400b320b352dda9ddb478786d8820fde8e9707cbc45c5e1282059994d65ead8e4987f249afb38534dab27ac59099c6f58","ssdeep":"1536:ckbrpZ5asBRVQFvoMJapYaiDKq4OevyyuZr47+uU76etJD5S1zYItyh+SlOUrfeZ:xHT5dBsRFuWKueK5r4SuU7DPS7yOUtRQ","tlshash":"a673025117a10b2ae42d1770187ebfd421af013ea2f6a2b0fbdc958f6d795bd0a74311","first_seen":"2026-04-05T07:31:10.885369Z","last_seen":"2026-08-11T20:15:29.101572Z","times_seen":382,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/useJackpot-3DH8fx3i.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/useJackpot-3DH8fx3i.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 706\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCONI6KSp11GR9P3AfvyeEJhN4UlxRmCF7fViCn5%2F98IUqdh49AGAvCnzszPLY5q2lYwQSex9O9Hup7DaSnEOkRG0cj0qNvboTlAZAZHeJS8xJUjY8ffYmup0TN7wOn7BSZUDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d042d5a56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1420,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1418), with CRLF line terminators","md5":"fe01604ee81ad32be66ed3de6f32759a","sha1":"b8b9a9e77351b5b822733bb6fdc5c725482b1f83","sha256":"bd350319d56a5d0935d6104ffacc8f42b9ba1e0c1b4870aa6c71b60129f8494f","sha512":"023ba555f3812668948d805c41b928f62dcda0f7326243aaf89d4122bc07651bad4b65cfe778c6aab5f543d3d4cdec1c7eee83ae19c6c0eb61c310dd988a507e","ssdeep":"","tlshash":"5621ce85c059e5f8f5cd8ca10167d72a1b383f797440a0a0a0be5ebda7a8d45b6a0f92","first_seen":"2026-04-30T19:32:29.86687Z","last_seen":"2026-05-14T23:49:57.34045Z","times_seen":6,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/pageBuilder/pageBuilderCssConfig.json?v=1778590200000","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /pageBuilder/pageBuilderCssConfig.json?v=1778590200000 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 154\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7wXlHmPtuMcH%2Fsn%2Bm7SIoiufzTOOzGAr26KIZVTzoBU6rs6Q%2BaSS0H9hCcXifE2IQ%2F9zrvUFJXr8pruOGNqfdU%2BklEsI2mwzmVk4ZJuVKKdNq4OuxzsgF5KkHkztUmeVkKOig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cf80c9756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b384bef633c4dad28cb58c0ed626c676","sha1":"ed85abd1e0329f1d4b3a764fce34525abf680ff9","sha256":"efaa340e7652864fcef70fdb10125f60ec395fa732325cff6606c9d8446493ad","sha512":"0b6f27ab057be8f03ac22f0ddd42677644ff77a325f6972b4a665eee859b0637a78f6b1cd6a4d8f7a41f71f76bafa85978497a74a418dce33aa0082838b7ca3a","ssdeep":"","tlshash":"32d02ba19675cf1126d210a302872ce56c6dd247b1808a876485e2f670c92881953f36","first_seen":"2026-04-11T13:31:58.704895Z","last_seen":"2026-07-16T16:07:13.034581Z","times_seen":43,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.30btcoservice.com/?type=json","fqdn":"geoapi.30btcoservice.com","domain":"30btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"30btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 09:12:29 GMT","end":"Wed, 24 Jun 2026 10:12:27 GMT"},"fingerprint":{"sha1":"B9:1F:75:76:BC:B9:7B:E9:F6:0F:E1:CF:47:1E:70:58:3D:CE:72:DA","sha256":"98:10:14:28:C2:C0:43:49:EF:BB:28:85:FD:58:58:F1:2F:F9:10:20:89:24:83:E2:40:E7:73:03:FC:A4:08:D4"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.30btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDuT1I%2Fkmgoii1f50lEsTVPp7W4XSFRxR5NmyE8xkioc07i3S3r8a4DETFf5dDqPLZ1RSMt5JLeiTRP8bxcO1zRRhLQU1B8IV4LuRfNAk97M3n%2Fq5Wq8Cg6q4TXd87l4o%2BSZ4CECVtS11LI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=x7aqnMgZCEDtzBeq.2YjOLa38JeJhTnOZwUmSHI3IC4-1778590243.2372868-1.0.1.1-nc7o6LBFZ0WKErPTLyMg7n1oBlAuep3smrXYUVI24CZ4XwjNvU26nR6pPykRtVq4qNbx9VDxZeGNgTtJz_PvYCWATE34EEqaUCBBcYw3tc.VWlumsFC_fj4kkp6d6Fi8; HttpOnly; SameSite=None; Secure; Path=/; Domain=30btcoservice.com; Expires=Tue, 12 May 2026 13:20:43 GMT\r\ncontent-encoding: br\r\ncf-ray: 9fa98cfc3a6d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-06-06T07:02:31.879116Z","times_seen":186,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/SystemBetCalculatorContainer-gFRshID3.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-gFRshID3.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 448\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T6CM4RfvJ%2B%2BNcqXQ37IOV9OSJHFAIu7Ui9sTyWtVPG2VGSnihd5P6Adu9U80FjcGISBXlIrHcbg2fEGAvSJ%2Bkubuadh8Qk0Vtt0a6X7B%2FOgtr3E8m4SWT%2BwCBsx3O0L9Fet16g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d020d1356c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":890,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (544), with CRLF line terminators","md5":"629601d82eaace15b01af40f48be406d","sha1":"136b5202e75a7a7b33a12e5b5c88f20ab58952e7","sha256":"91e8e66f4b6bef20214a9c81d459c66c05c015c9a1c506feefd9e005ededeed4","sha512":"8821dc48ba33c4d88df4754c209d861d49485a98a4f356c6d47432d4893a4b1b92c667408d504671a702c6c6546c30dc39ab052dc42052ed0678b936b8f0d477","ssdeep":"","tlshash":"ec11c0139754ce74c48a1ea20585a0500db1061c5a18f568b6f58c3cf0290d383ebfbb","first_seen":"2026-04-30T19:32:29.948573Z","last_seen":"2026-05-14T23:49:57.380567Z","times_seen":6,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/GoogleAnalyticsTracking-yBQHUQgc.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-yBQHUQgc.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4572\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xUpo1HieEGJVWuvLX9FXC57cywVeFalyOIp3xTWejg9NS%2F73XfPrPqa0kBLTcK3QiK5JlqYn8zc61duZfK5oiLDXjxPFRVB9vKaU4dUlcmRjezqvPe2f8zHax2Ftdroeat2Gxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d021d2356c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13707,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10208), with CRLF line terminators","md5":"727649e3cebbce9c49b593d32d6d0a7b","sha1":"449526ee932242cc315722b3bedb98e7d33b0e69","sha256":"1a1fa5462932c03a4b5ba35fd23c54fa63c0edc214f3eadf57da0cec261d75c6","sha512":"997b1830d52e6d24e336cd1f551ef4d26b5aa4cbf62c3486af37abe827032d05400e8761791fdda0233c5eb48ab3212dfe8279411103b2c37dafdce21144140b","ssdeep":"192:mWYceR0SE+m/C8b3bHXC876hoxGE0VK7D6L7kBNrnPWh52Lz2PM7mBz:bYcoE/CEC9EP3Byy2PdBz","tlshash":"bf52b55c32adb0b682df6054587f720bf1755910a458f480a265edf46ef8caf026bf36","first_seen":"2026-04-30T19:32:29.949542Z","last_seen":"2026-05-14T23:49:57.414707Z","times_seen":6,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galabet1074.com/storage/medias/galabet10/media_751_81a0a78176aca202a6413bca3746cd67.png","fqdn":"cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_81a0a78176aca202a6413bca3746cd67.png HTTP/1.1\r\nHost: cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=qX.LimTLO.s3W_fndTwRDzqGGOIV8FrPAp2EILEHE98-1778590243-1.0.1.1-CqbXymCriyApEVq2_T8QmDKl.LlPHzsGV3wpiU7m_Pq1wCdiqMA_Z0.Gkrq4O38LI3E2YcspcW2j8wWY0DehHU7ENyCT4NNfLpyWi5hcqdU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 13516\r\nserver: cloudflare\r\nlast-modified: Wed, 08 May 2024 11:53:54 GMT\r\npriority: u=4,i=?0\r\netag: \"663b67d2-34cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=uDYXcUW8RrwKplc0HFoH.jL0kE93pKxiSkVeE0C1e68-1778590244.3732195-1.0.1.1-naeruZUMBreT4jwYH8I7C4ycVpCGEJGxdm6oRNkCzUm97yPLPUDr7VmRcZruUp7dHdyGglPr4f94D6QrExGgyxVW649E9TGiEAwsvjh81KDFfRnd2Xxrs2Dd72scoD9q; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EvFVeAS6e8ePcO76%2B94NrpBkONzSbg8kno2N4vuuViPaQ1WJ3Lvz2z8lFUsJa%2Bsq4opeHDoATDV9bB9X4dEExcXDUuJ7HcLXbzvi9hUvhocKShTcPCmcOCkRKKI0FvAnMC8esaxH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d035df4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 340 x 340, 8-bit/color RGBA, non-interlaced","md5":"9fdfdff5cb870c3f0abb6cc44f262bb5","sha1":"c48fb4dadfa4e6b4de69ec0e7e02445057c7e0ca","sha256":"308a8c0f3d3f9792d26ea2d84bd633ff1f490ec83375b1613d29c0995f8b740f","sha512":"39264153a485e22fbc442e86234ce24863f5bcbfcd47cad34f5afc8715946825fc705491b2ef888295f017d98f393c44fb28428dd05b829327c7ed38db3d4b19","ssdeep":"384:CvHjxbUGUk1+EVWqPDks5r6BU+xND3AU8h:CvFHoEVvaDsh","tlshash":"6852d0f0ae72adf08ab16c81539d8d1e8473de7ea5913f0361f64077e64e40d390a4b8","first_seen":"2025-12-24T22:39:16.288188Z","last_seen":"2026-06-06T23:43:56.100804Z","times_seen":54,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/useNotificationsProvider-D7YdiWNv.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/useNotificationsProvider-D7YdiWNv.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:58 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=azSc67N8dxe3AeeXtBXNxEH%2BSxchNpwWnTOLZLqhXd4O0htAIAytCH7VREFpl9nz6G91RSHF8vso%2FPbhrR4f%2B%2FL%2BhOfVf6Vdm5YNVoa%2FDxpMg%2BtKkynfmdgMRG%2BwFc2UlhyrRg%3D%3D\"}]}\r\ncf-ray: 9fa98d043d6556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":93,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"76fc29f31098733576f3109dc08bf01c","sha1":"d154589364a17678c17f5b21dcd9b7c7eede5ee4","sha256":"8e77528d96b5132ae9306a4a71b205dffcdb013e82e5e7e5c9ca4ab9f745a63a","sha512":"da7f24bc5adb5bbf5202a0ff224f867ef00d661344f15ac51b8bcd8365bd9bd56bbb0e9de3d56b795b367d7b24591c2f1902863f24baf95ed6f2ddde347adec2","ssdeep":"","tlshash":"8db0123318c003f022020cd8011498290630083c3b918ae00224920c21e9099830fd04","first_seen":"2026-04-30T19:32:29.720769Z","last_seen":"2026-05-14T23:49:57.374863Z","times_seen":6,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/userJWE-pM_Mqpsg.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/userJWE-pM_Mqpsg.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/FastTrackTracking-DmVUP1HR.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:12:02 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=piT9iBvBHcF5Eu2vpZ6smLXtvW10TBjR%2Bydtvm1zOScyhM9WYma%2BBRWlQ0h%2BmJAboAJIBlaOx%2FtzvInAS1QejAILjGSWGWK6ft1hQS6p9wkK3afb8Uf8ZSLg5mn9ZUd4u26UzA%3D%3D\"}]}\r\ncf-ray: 9fa98d051d7a56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":194,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"501b70cc98d6582f6ae0940f4a6eb51d","sha1":"32f51eccc56adffed968cec4c0568752278df6d8","sha256":"90322e1022e6e8339782be885cfdd6e8c38b995c2e9c33e3610c59301351e982","sha512":"ed1eee1b87da5696c41f127f2997600c4b8e86fc1f9864a0c1a4322eb732ef186bf8aea19ad4dcc1fe69d7bbd65a2d9d4cef5fb9f65c23fed35cb2e0ef7ba683","ssdeep":"","tlshash":"4bc022eb0cc411bb85582c401049ec128220392862e8d3415b08d3aaba6600bb20ca14","first_seen":"2026-04-30T19:32:29.88265Z","last_seen":"2026-05-14T23:49:57.461024Z","times_seen":6,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/Tooltip-BHyVkt4V.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/Tooltip-BHyVkt4V.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/JackpotPoolsWidgetContainer-BUz-kRPc.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 459\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6a%2FnmhaE%2FG9ghWKM7hbmBmyQWhzLAWBih8YP9F5p6hgGigIHHLJMkYDxq%2BHZrujKcI4YdL%2FW2tgOtWusAwcogozVVe8Zn1gN56Tt32phpZlSVfwLpoGMZgsxjob47pgF4z2XZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d062d8c56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":821,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (819), with CRLF line terminators","md5":"a749318be9752205b42d1b9189971a4e","sha1":"721feb3d960e535deb8eb5d92e04936e43013e0e","sha256":"c86970db4ff5ada2157e03be42523520634dfc56551de0df48c1819969d39e6d","sha512":"04ffa6d71b78e62a3f0fe07aa75e2942e549264346196633635fc7b7607c8cd7a6740c50b8e62116533866856814e51e2f5cf0529d25cabdaa51ae7640f90c93","ssdeep":"","tlshash":"3701f656e032fbf4e17754d6142d956d7153366c7e2f58f06038058f0ae4984d317b8a","first_seen":"2026-04-30T19:32:29.743301Z","last_seen":"2026-05-14T23:49:57.348232Z","times_seen":6,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/eSportsLogoSportbook.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/eSportsLogoSportbook.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=BFsT2L49EL51Q7zwki2Fz_ZFcq45Jzys.iEi4lXTH8k-1778590244.1321144-1.0.1.1-La36yvmWzPe4MQX0ZA4SYt2DiUW7.femrFg3GwY_vX7l2eyFyHuVAJIFcjtlLQtL27omfeLYzBD9uB7io6DY1_b4TpEOay2bFwY.RYp_GfJMpqdlmw_gptdKfGSZtojE; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPRak7igyl8idOuNVZ%2F09QOWLSlU9Z3S8wQwf2neXHO749vYCpX7I5qxVWzDVV0tO0tnhVIWrleqehGclU%2B2nRNilp5iiMN5kcZe35OGbQ7xqFGixyrdzTT6lDayZ6P2AvjicRABYh0%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627053-43a\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01caeeb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7947853d1ed29dd8dcd4f9f507e49866","sha1":"cb30cb5a0f55083522666ec3424780ddf247b264","sha256":"676e17bd005b7d157e248a40b8b8d0e1009615e5b426510dd0f5d8a158fedf9b","sha512":"0c46971a79be56e827f5df0f1f3bfa7583bf8a9b273075894c07378b3dd0ecf6800426cc7a9d5833626655d9f0958aa57eaf50ec7bcdd726fd78f3176efd9290","ssdeep":"","tlshash":"7c11d82cd3d8847cec39e3bc51356ca4704a48daedf6d275e25b89b05713758065cde1","first_seen":"2025-07-08T19:55:59.718474Z","last_seen":"2026-08-12T08:19:42.7965Z","times_seen":383,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/Predictor.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/Predictor.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=OIiQTVduI1l_JSe5DJEhqnT_puvPQb4HewiJ9yxS97s-1778590244.132903-1.0.1.1-7po6o_9MNTjLF2C4nCEvcdV8Y6F1RtCYf2dAScEDEbnuLol3B8HzC3QZ2aAgh6q5XaP4hDbFG7j9g61B3jZh1QH5DRlzz7_WjBLXD0ccYS_nFhWGthjzBL51Ro.BAR9t; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6JS3goeDa7dmrSFcp4rfYahtRjVfCwSZGcl12Xc8qcVytj9PWDNXEO7%2Ff38y8huh2x%2FK8U%2F6w3wtbO3q224uOvs29JUCfZtjs4UIRHygA%2F5gTOwnFe9%2BGoIGOp1pvp6%2BwzPgiiI4GM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"6862709c-2ce1\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01caf3b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11489,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9b3949596034c0e170589b0d298d8d80","sha1":"3ef85a6cf846b4e3c0453652cd192a92db48165c","sha256":"14ae74f8558911ae15ae063621fa5b3f92699ca40af8034feaf7da18e1c5b5f8","sha512":"cadc1b604d9bbb9116a00b9cae1c19156c46103627ff76f5040c8f249ed6f0215f662f45a25d9fa1654671e8c6cfa4b258cc01d7f165f4a6d1c443671b91f68b","ssdeep":"192:IDzUUkrlb5YU/aMstNifMcLwW/ykO8piJesLUoyua7aASt5KsM50FgJGPbdGl+Jv:Ehk5b5LCNi1LJ6gsM5KgEPJGl0v","tlshash":"d2322fe7cb30c0e038de25bede2a5ed93a1ab4bd5ab1d044536dbc09d6c3dcad628540","first_seen":"2025-08-06T06:15:59.472831Z","last_seen":"2026-07-25T08:10:51.70733Z","times_seen":114,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/TvGames.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/TvGames.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=lC5tyzQ3QP5dv1hhTMSHlzJFuehkpJl2Elac4QxgCDE-1778590244.136121-1.0.1.1-sEHz54lTThDIpSpoI7TL60oLSPTG9_Xl51QFzSnNm8pvSEjy9Zh6PZZCWZMNStzzMh8D66K2fUADaJuXwQVZ3uhG7P4fPzY1_sfoKKyZ.RYDfHksan6U4g91dZ_xPBTR; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQmjQVMpApzjOlUWxHbyMWguL31mghGm5QO6qJ43niL5ol7iUqOkNvinlakwuYM6Pf2nW2Ca9j3ZNRXETB6RaZwCRQshJLKHuZlp2m2QVDcJ6Hraqc%2FC7pyUpxWkPip0VRvy7wtpwlU%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686270a7-c81\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01db00b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8cb4d739571507bd6cd3b25a15163537","sha1":"f8061ea6ba5d599b463f5f146b407b0f6fbe4bfe","sha256":"3b2f15bcef3e58ac040feea4d073d42f18e48bb6f399c4f9f89845931f87085c","sha512":"38862ca5d9bb144dfa4b9c0568f05439e788848d45f8891fe508570322d34200ecb0e3f70dd9f1e8ae5659ae3333fe154d439e797c556ee94fbf88f47ddc3cb3","ssdeep":"","tlshash":"41619c87ff3089e04a7c5f99af6840d76689c05dcf731118b23c643e5af7d5884ac9a9","first_seen":"2025-07-08T10:50:27.694177Z","last_seen":"2026-08-12T08:19:42.885842Z","times_seen":547,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_b175e6367bf765a1c9f2fe3abd914a9f.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_b175e6367bf765a1c9f2fe3abd914a9f.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=wbplXKCj.s2r4bhs.1MDjZ2iCaFlh3N_S1orvmeSAJk-1778590244.372432-1.0.1.1-A8L6PIqIK3BrU9QaRFqdboScNCQr7kOoekOuOTi4huarw3ZIETfKFjPawhT0EWIZcJ8k7xqLYfDl88FbpQ3lynuCghjE67zgSj62GPuxy3rOjGB_qjAf_9SY1vXNvRxe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44116\r\nserver: cloudflare\r\nlast-modified: Tue, 12 May 2026 09:09:08 GMT\r\npriority: u=4,i=?0\r\netag: \"6a02ee34-ac54\"\r\nexpires: Tue, 19 May 2026 12:50:45 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8xVoR%2B0Hqym4EWse5l9A4cf9ecUnvtOI6BtgrG42sR6Q%2BvSopUrpF77SW1wky9LIMUZ191gjLwIR1yoOyiRlMuGFvrffqGf1M5X5T1YL67xXhWqUEpr%2BNDnqgAmQda0E7vj7i71N4A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d07ac2076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44116,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4d188eb7e1a424530e26605dfefd7a06","sha1":"a23851b6dcc6bfee4e3ffa15691721d9975efa8b","sha256":"d6b446a4b7a52764484c22c1876c5964eb7a393d8a75311ae7d6a5570d7119b7","sha512":"e52779e31e35f6e9371af182944ac99b7297093536bfd3cbb9c6d057c8c910d2f7c1b86b90237e7e7997ba156481e8d299fe97af8c7d7085c46e2f8990248edc","ssdeep":"768:RTUDcz8lkEKMdDnJ2og1pUn/t+x7gKaDf2rvNCkKKKwg2g1PCiXn9ZqMHfG:lUZl4EJ2og1g+gKaT2rvNKKt21P9TqM+","tlshash":"5913f255480d218474f0afa8f64c18aeee1c76d4193fcffcd9a2f8514d1ae9a7024bb5","first_seen":"2026-05-12T12:51:51.095565Z","last_seen":"2026-05-12T17:10:48.505973Z","times_seen":4,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1074.com/api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 582\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nset-cookie: __cf_bm=Ncb.HXkKqm17FIpvo2w63IQTGyE0JWgsAZdmMlbftx0-1778590245.0753508-1.0.1.1-pFq9iJY6p6exZq0Yp2Xg7gKJWFJkaqe00AGIJlwRsa0dLAsoT1sMpIshUgwRcALSy7Fzzv2CPJJAKvgLS7JL04hzlVLfMe4RNCAyNA0rSTUArYFBzsP_etg6S6CP1.I.; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3j08SrkOvPWO8CItPwOKmBiQaGracd09Qn3JCVzDDTCaC1DTITzJRKHZhK4lYwlz9FDbh9kDZTWAEio8qJj5pspAlT1r7WtODzkWJ2SXadQNTdyYurWAQw750QN9TLXwK6UnjKoO9qk2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9fa98d07b9e4569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2222,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ce3902f4bd7f8f07ef19311509e56859","sha1":"4f8dac69410d4feb2f28963976a11de31833bd47","sha256":"e95f8590f1b24eb82a9bcd46e69bae80f375da5a9d273d5111fb19ec40fce0ff","sha512":"ec76ed398930c6fdeee5bf27adfa17c668ef4d344e8ceb01367f6f2251bc83502c04f7cc4d2cac53b3ffe176e1c0b850a266fc233aff454e7c5ec42b1480d1a7","ssdeep":"","tlshash":"c7415933b02c98a65b443b40b4c7394a94dd54c7dc0b8570dc899f8d86eb6298ad32d7","first_seen":"2026-02-24T14:23:51.361484Z","last_seen":"2026-05-14T23:49:57.392496Z","times_seen":49,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/immortal-db@1.1.0/dist/immortal-db.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.1.0\r\nx-jsd-version-type: version\r\netag: W/\"ee25-pMHxoJFNs7/Bok84dZEhK2Ol9UM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\nage: 637289\r\nx-served-by: cache-fra-etou8220189-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 19803\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43474)","md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-08-10T15:32:58.760263Z","times_seen":457,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":134,"dns":67,"connect":26,"send":0,"wait":28,"receive":5,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:41.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEh80v9ii0HfaBF2Da0BVbPHPqqGDpjHlsvUEq6XsNppU6N2gypVgPeAU6__wqrL_pjS-rNfEN9UQjWu\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\nx-goog-generation: 1778587684533259\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 103605\r\nx-goog-hash: crc32c=xtPuRA==, md5=PwrH8/w9R24OMEOBcJkEuQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 33468\r\ncache-control: public, max-age=28800\r\nexpires: Tue, 12 May 2026 20:50:41 GMT\r\ndate: Tue, 12 May 2026 12:50:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":103605,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"3f0ac7f3fc3d476e0e304381709904b9","sha1":"6881e711055904d12f071ad09558d20227de0207","sha256":"3fcceb11e44ccb654e81481159a6690d0648e643593eb75ca8dc1bf0f9142000","sha512":"f2fda214d02543740c7562dbf0e1911408e434a5b5f995b478ca7f9b762870661ed1779b83dec1850c666e4b6ac2c961a74fa7cdbce7049f05c40942966f7bc9","ssdeep":"1536:E5CjHdDrijOxrxfp36c+5QieP8/pLkVkJy20wpoRLpVxcYs+sdFXAPmO:EordDuj4K5Q5PIpmkJOcYsBdFAF","tlshash":"cda339d67282b03093f786e7a0bf6212b3395918340d8410f17ced6a396a9c79177f6e","first_seen":"2026-05-12T12:09:28.867481Z","last_seen":"2026-05-13T08:36:34.76013Z","times_seen":68,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":90,"dns":72,"connect":1,"send":0,"wait":2,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.BGQ9L0F4.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/0.BGQ9L0F4.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEj4O5vsaFLdCNJwFe2moO1oxRfXPod1E0_Y0CjhdmppvHtNbTNU7aQYX99Cd0w-WdAjIbCu0q4\r\nx-goog-generation: 1778587684322537\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 79623\r\nx-goog-hash: crc32c=9yVW4w==, md5=Q0EZJGQMwrcRcIWY9z9zXQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\ncontent-length: 24808\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":79623,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"43411924640cc2b711708598f73f735d","sha1":"c26b20424279ec8528abcda60adbc3e40eafed3f","sha256":"1323be012b8bbb3fbc8aa0991412d1ee05334a0bf77b922910fba46e65636fb4","sha512":"b598d70eb381d52800ea90a9a5417829340b3e98e1eb6231505fd39b00be72a3cdd85ad1ce092f42bbfde1ab92e2dbef7bfe9d3e344b9095e395f73a7b922853","ssdeep":"1536:N+ZXOfazN1Vctp/ItXqDBKHEps3A33WjUl3bJS+WgxM8:EZ+M1gp/INX0GzwlzWgxM8","tlshash":"4e731ad1f295f5398be7a8e551355103fa3a7918782c8270f32cce20315e686a177fab","first_seen":"2026-05-12T12:09:28.81507Z","last_seen":"2026-05-13T08:36:34.816246Z","times_seen":63,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/DisabledMarketEvent.BUY5t_rR.css","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/DisabledMarketEvent.BUY5t_rR.css HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/tr/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 09:10:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 172\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2Bdalufo9krm1kvh2FDyNcvHl5RWIJIkM7Iwh57OLK%2F6NBpDjMnVU9A80ZCMu6cCh%2Ft5YmLcFcYVkEtcWYAWhRMvuFzrNdVkgJtxuJo222I9dAtXOwtBxLAcxIh52rVLvCbt8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9fa98d041d5456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":709,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (707), with CRLF line terminators","md5":"f2679b65729f186826add6a6f2f19776","sha1":"8fe28caa0445a8c4725aa7832d6c217e280df517","sha256":"65dab9b6bfde9b99b66cc87946f49036d29a5fd38698c539129de754add29344","sha512":"b13b69c5a4004c4b5ddbdc108cda821ec221f0a4c1131a01a6954c036ad854f8cc5d86cd6b838554d47e055d06b270f200eb98d5efb36f00e775421f0258c9c6","ssdeep":"","tlshash":"8a01d4c4f98a25344c3a9d0c9abc8fee960a93705ca15d33789a113a4bce08a4a20d25","first_seen":"2026-04-30T19:32:29.861186Z","last_seen":"2026-05-14T23:49:57.460123Z","times_seen":6,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/SmartMarketEvent-B7WtyuM0.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/SmartMarketEvent-B7WtyuM0.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 433\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ddm9Gl4Egh8GC0%2BYPojzkUOGeB%2FwpeQNM6cP24JXH2MELpwYnmixSJlsKTOobZaldakMihcynqKlaQIDQhRwzHYkkorPjNcm7BOxiBGlNJvfjG3K01bSN39ATc5VkDgnlxMuRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d043d6b56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":916,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (914), with CRLF line terminators","md5":"1544063b17e5106b1e0a16a20a85d1cc","sha1":"e08ee3bb0960946747dd5d229b12c8293caa74e5","sha256":"26d31ddc1ab40706c1bc90bfecae76ed6eb187884bd15daca3f66b13a638b923","sha512":"5a7b32048ac5222429c116c489e1017a9acff2f43124e0ba6af58234cb241cb0b9abfa2dae74795820c64cfc52d59ba68c5443c45ba06120439824cc956d6423","ssdeep":"","tlshash":"0611efe6d480323e0672c8bdd1109b42419c13e7cb200269e98b86f573fe0fea34ee59","first_seen":"2026-04-30T19:32:29.816947Z","last_seen":"2026-05-14T23:49:57.485522Z","times_seen":6,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/HorizontalSportsList-e7xvm1uO.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/HorizontalSportsList-e7xvm1uO.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/FeaturedGames-CW2_S--l.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 264\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W0LqmMMFs9LcPSt0LTu4ybgTY1NjfdlVVKvqABpUz6eeMgvkKSUrWBTvybqxzl5L1Y9gCZEaEKtJSWFHNOemf73j4yOvierMfIUZwcOZOKKWyGDRP%2FFJh0LUYqawQJ7%2FxmNzYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d06dd9756c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":423,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (421), with CRLF line terminators","md5":"3ce4378be8d26dcfcdeff97efdc574f2","sha1":"e4107ded57744f21117c0b51b32b710c445664e6","sha256":"1cac841c416e09b71f68837ecb39d1a4bdee6813fdc2f4283d2e524758b9e3cc","sha512":"1ab84096c771a3adbad79621354f4f04324527a34dd29760c8393084f36c7b506d44de3d7002e01aa99a05b0bf241d8672f5740947a15b763b9aeb1387b95a23","ssdeep":"","tlshash":"cbe02bc2dc618af45a1e88eba99c24857012047cff566664d298a2282b7508bf76940d","first_seen":"2026-04-30T19:32:29.763259Z","last_seen":"2026-05-14T23:49:57.348732Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/1276.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/1276.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1461\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Apr 2018 06:29:47 GMT\r\netag: \"56c7307ea7ccd31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNX4q7aAQfBKqPiu5V8tiWc59k%2BNs8DNIC92F7xPbP9fe%2FBjZbuLqMYG%2BqKOjfZUuURsycdfxgPACLxzvOvYSjliHg7SrhVxueubb4Bu2dN5btjIskmGV1ldExhzcc%2B277EFEDx8NbXF1z27Hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7e03120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c939a9c44fedcd0560260de3575ea843","sha1":"dd385684429c9c56c92257afee0d48bb9100dce5","sha256":"59c671d05f6a55e780ec9851ea35888a544b91abec5fdaea74fc2c7ab0f544e3","sha512":"6f67b44031e678d37fbde7ca3fa814b941328843308ff93f2e8992e293df56f035ed7b3c21761dbd8544b697da880d1baa6b80462f8dd441faf8f8125e9a8887","ssdeep":"","tlshash":"d031e9cd2add0f58ea2c856d3a730a92c4bbd5e9434f60190231e0fea569ce84258f46","first_seen":"2025-08-01T06:47:36.024538Z","last_seen":"2026-05-23T17:36:46.350077Z","times_seen":149,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/500.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/500.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1427\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Nov 2018 11:52:33 GMT\r\netag: \"2577e72da388d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgU7b7L2O5HXuY7Dbcdc4%2Bd%2BDR4QMVrhi8bpw24i7UFboPOpAbStVaZCcIH7xKgOmvI3ZsGVKXlVm2zZxSIulXz593rI%2FAqWTOxyVyaCju3mqpx1IpWiHBNbhJlt3nUdNvwstb%2FmKqYsXzif1A%3D%3D\"}]}\r\ncf-ray: 9fa98d0c9d5356c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"2eafd179273844b958b79739fe34e81d","sha1":"b5bc4f65c46699613d0c48df08cd3e3234314d0d","sha256":"6d9bf9f542021e29ddd94b730809cd3f4ec09664ec048f9cb3125405c5e910b7","sha512":"39f8378a33fc50c198cf25bd792f48451fef315911974e5637996ac143fa06f869dafd49420c2a9a6a64b608f6afb8765c731269ce35edb4d6bc921dc8eac136","ssdeep":"","tlshash":"192138d23efd1cbc0c0834b1401a5363f46838e1cc014acfbc919062b5f2d0888d29e0","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-08-08T13:53:53.965758Z","times_seen":179,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/496.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/496.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1399\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 07:21:11 GMT\r\netag: \"1544467b286dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNhaW4VrIxt9flXz3GQgL62vcSJ%2Fm2oxinp1ng%2BjxdiwptDawgbi8YvdGD7ZnS9qDY1iW4Ozea09HkH76aQ%2FWL%2FzQuhg3%2B%2BJeJ6MS8c1otrG24F2P%2BU5mfj0JTLCjVJKgE%2FuaQc%2Bg%2F5kJ0Pztw%3D%3D\"}]}\r\ncf-ray: 9fa98d0c9d5856c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"cf2bb2bc9c54938c8047c0956059c8de","sha1":"295e2a2a20f15c955f460cc5a6e4d5986fa16ec5","sha256":"769e64dca7586fee06055345ecea146b5200834727b82d21e6457754b3fb4800","sha512":"3e5fae3f4ff21322ef2a41729cc8f11c860180ae5ced261a4b5daf7a7bc793e009976fdb153e41eaa23747c6a989a13343aabb70846b9f850d1d8a160f17f69d","ssdeep":"","tlshash":"fc2138cbad060f82b6ec062a3e68e180e28660e4bb13170c35bac5fa04c8f4008738c3","first_seen":"2024-09-19T20:43:47.581287Z","last_seen":"2026-05-23T17:36:46.287508Z","times_seen":172,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19615298\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fm.galabetl075.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__2myio38s3fq","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19615298\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fm.galabetl075.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__2myio38s3fq HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://m.galabetl075.com/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://m.galabetl075.com/\r\ncontent-length: 380\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":380,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (380), with no line terminators","md5":"c0ef693eced60275aec3e8e7e39701dc","sha1":"8956f6e7af032e7d88e4b51de7ca966b4f85e599","sha256":"7899506fedebdf3926dab7f751aac7ec697ee87ac45b29a6c3878438c548a3fb","sha512":"57a39afed35b36dedc27711959eb34df71d265d1ce8889452839584fe9507ce8c4be93c617b79e09aebed869876b8739757427bea43238932cc1c84915285bda","ssdeep":"","tlshash":"e7e0683ba30195b185c1e2e8b44569066a790762a014746d63291211e70ea8ef326517","first_seen":"2026-05-12T12:51:51.106303Z","last_seen":"2026-05-12T12:51:51.106303Z","times_seen":1,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/menus/header_menu_751_tur.json","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /menus/header_menu_751_tur.json HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 2470\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SJ%2BJKbjVDJg1k3lt%2FDTs2QyQ1TSj2jOvxy2XN%2FvEJMt1Rpx8vJnVmOePsra6KoF80kHR7W9xAKXR7XDHC%2B1NxE2%2Fh4T8dSOK7B0gqGV%2FvV%2BPrgj3Cq2Az92%2FTqTOnbcc2nI0pA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cfface856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29624,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8631d820763ad10e00bc18b8fa8670b2","sha1":"6386f089ff432913d5dbe74fc7877ca3183cd9ec","sha256":"d36f6c67936884d1cf45f5e31c02883ecc90271d05027d9570f598dfafffafdb","sha512":"c77074e9593c9b95ff706bebd286ba286e620b2a558dfd21a662c499c04210a529cb9db1efe44ac0fcac55d76840a72354547e8269f8af1b40a81803a67f83bb","ssdeep":"768:ESqDWDCfBFZuT9o46RcMDkJkKzaDCsEP2DFKB0ATF63aT6CFkVcKbeSjj:/oDYufBl","tlshash":"cdd27322e83a4c5393887a3068d50687975542c79da6bc053e8c598d4fcfc5ec6fa3ee","first_seen":"2026-04-24T13:47:04.819133Z","last_seen":"2026-05-14T23:49:57.481573Z","times_seen":15,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/GameSuggestedEventsWidget.DT3sdmgt.css","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget.DT3sdmgt.css HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 09:10:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 137\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwfsSb2xf%2FzRUEA07agtG3%2F7qawwt6GqI%2F7Wr%2B9l87yyo5c58JyBDg8xiAcPKPPMU9an5EY8T%2FPpjIQRtZIw9xUixPp%2BbV62qVZQtqo%2FBAhg0QrgBruXh%2Fqgdz%2BAIK8wUgE1Rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9fa98d00bd0056c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":515,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (513), with CRLF line terminators","md5":"ef126e0eadda692f13ceabdfa596f198","sha1":"b56298dbe9c061cec6aac4260f98306dee99ced5","sha256":"154fd7e6e49e339853c707c665500a6a46fd16784a233507df0687a4fd6dbe81","sha512":"5612de02d4f27e6054db139c1255eaaffee23c6c98baca19d6cb1238fe6a271178f6d9907293d12d819614cc575576e14f0cde3ab6d29322bee050db1fb80f53","ssdeep":"","tlshash":"c7f02b218e21ac3564ac03ad2a77001a5710e195b81039f82fb1bf058a047e50cd82cf","first_seen":"2026-04-30T19:32:29.960137Z","last_seen":"2026-05-14T23:49:57.515945Z","times_seen":6,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/508.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/508.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1287\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Apr 2016 08:12:32 GMT\r\netag: \"c0fe8ea59bd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NGi5248d3JH7RiriX%2Bh%2FoERWziDmUArGau0YYbEa2tfoA5qWzRxW10l%2FZQC7SrKYX9RmlvOqVNTIHoDux5I7XcxeOI3oTG%2BDDCCFtCMv8yFTi4kL8HcPW9rJK%2BUNwltKH0uSX8iP9YYPIcRLXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7dfa120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1287,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"240195d3bef9ccbadef65b0ca7edd319","sha1":"d66db66472223288df6b2efba965900f062095ba","sha256":"d50d09e4a1da04f755ef8a22ef98b6f3de27ba38d1175e620deb85480008a0f8","sha512":"71b8fb62c75606d1c8b13e7b08e818785252053ea7dcbdc5cc02f25b247962890ce3af62301c2197896e7a39d5e2d109560d62d7282c6f7a439933c5e18f6996","ssdeep":"","tlshash":"a2211aa49f8de8ce4fcca155554126f21066525b77c520c8d120942b44d9fe03996a70","first_seen":"2024-08-20T01:02:42.361347Z","last_seen":"2026-05-23T17:36:46.362523Z","times_seen":133,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/fonts/default/Roboto-Bold.woff2?v=505","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:47.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /fonts/default/Roboto-Bold.woff2?v=505 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index.C0U6OaZb.css\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p; _ga_MCEY36CK22=GS2.1.s1778590245$o1$g0$t1778590245$j60$l0$h0; _ga=GA1.1.1624701396.1778590246\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 09:03:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74184\r\ndate: Tue, 12 May 2026 12:50:47 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xR54XCrLhOn0EQQd7W740mo6Ox1eKv2Lx2ri3vmGOLZ%2FVAGtSAT%2FQ5BA7rZsUyXL6eie1mk4%2Bp%2BMBtB0Dnfh8wM3%2BI%2F6sbBoGcem%2BV6FMwDwEskSa9%2Fz1MQJKTFYZ7alWXFkhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d150e1456c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74184,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74184, version 1.0","md5":"b270a087c3e5691e8dcd9c65c47146d8","sha1":"eca2667e8e4bde8fcfb4f7bf60bbb173b253f012","sha256":"a263682614bc107fe67de6eed6bd2e02a7225cba494c307732bb237bd5fe2e5e","sha512":"7377ab397d9ad4f74c194429c95372d83899fdb831cc2d63b80d84898be9b14e6b43889470ac2b5ef017989e5ab1d3d24b74dd461c9781c83e14dc9ad37b7b67","ssdeep":"1536:0VL7PKKoeF5SBEVL8FqoDceu/+6ab00LtFbsCbE7pr:IL7PZnqvasb0EtFbc71","tlshash":"3a73017c44e03055ecfded5b329f20a3ca3863e258d59e88fe79099d1cb6bb8118b449","first_seen":"2026-04-05T07:31:10.868394Z","last_seen":"2026-08-11T20:15:28.978537Z","times_seen":386,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/VirtualBetting1.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/VirtualBetting1.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=HvyJACcKMgxMMy_76mZE3QvdhR7FGVyhef8M6sMLaZY-1778590244.1319883-1.0.1.1-1lgPS_WxY9WkwmvKyhvyN3WmC_KrtH3jqLS8Nc4oaOiYDJ08lu9TaLVE4.XJEMPknZmGrwxlYsCM6YhclSpsB7ZbNW6Lzta3UXu7TjHt6MF8XFNXM7v20jOBeKDPQOF1; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AeEJ8DwcvzFAW09jkdrefJCECzwWzsMHX%2Fa9C9cezOrtbDMBUdmrqTkgNnk3WjzY%2FidqWMHTosQTfEHdfCdA1dG99SG2Bo0e9Ix8nI7d2G%2FjUsJsFWBpZETmSBYNJapPIbTaIgkBsK4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627104-320\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01caecb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":800,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d36eb3cba0196446e5ecd1a41eb6a1f1","sha1":"d6f113e0850fe1dcd80528c0efe40b1b9b0e38ba","sha256":"9e07f25c6032cecf5b0bb0c9fd6411af2930a1fa4be994a7c9125a9047e3db3a","sha512":"6eb0be89ad9c5f90473a271a751901c458c9dcabe6116b8fcdd95d97ed741328571fc081f4652f41f81a6a23eb7ff9e89e290b39af1799fe5d75b96ea78743b7","ssdeep":"","tlshash":"9201f1edd57025f0c4882befa76905652bff443b0552bb28ceaa0d0c3fc796d9210422","first_seen":"2025-07-08T10:50:27.844023Z","last_seen":"2026-08-10T15:32:58.663034Z","times_seen":1682,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_aff4011d6c5525eac140c93daa9b705e.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_aff4011d6c5525eac140c93daa9b705e.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19502\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Oct 2024 12:45:45 GMT\r\npriority: u=4,i=?0\r\netag: \"66fbeef9-4c2e\"\r\nexpires: Tue, 19 May 2026 12:50:45 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDG3oLtTsTY5xPISDYEnCTuqwBPOHCPbKXa8r53mjB5%2BMY%2FRTzZKNOjdExKD48s8m2vnOAJB7eW5VhZyB5cXuCxs5ig%2B5bdDPxAAJPGSDZDJ8DEclGrfwz0s6HkjQQKJ1xstMhB0BtM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c2b9a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb8a2fce829b77a41898f77b8044a7d7","sha1":"ec930f3ad570b2b82de7435f403294373b9e08c8","sha256":"eff975d202b8198412f6fc60d2a9d0debe36d1ea2a413caba2b3ff0fa2146327","sha512":"b4021d2ee5657abe95d0115e5695c124cd500d20ab1d331c64ac4a416de874bf3cf83e9d79c50d133c843df31a1c2dd39a2188256f920ec027bde67a051a05ca","ssdeep":"384:jTMW+QrwvaBEDdPExxNOAZA2MSjnzJAkp+4avBq59InjItQua/ctq:sW+QrwvaBYPE3WNszJt8TBznfB0tq","tlshash":"d492d0f2949f7a4a5b93ef328c38c2011faf335d0b64448461c1f69544b495a4e6f9eb","first_seen":"2025-12-24T22:39:16.161133Z","last_seen":"2026-07-06T22:32:46.704914Z","times_seen":55,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/05bbc3dd25453dabd8569c9cde5f9b83_casinoGameIcon3.gif","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/05bbc3dd25453dabd8569c9cde5f9b83_casinoGameIcon3.gif HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1674020\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Apr 2024 08:37:50 GMT\r\npriority: u=4,i=?0\r\netag: \"660e66de-198b24\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=Ez8aHAgo4NbIx.YGKeM1xCHLlcDyz9o4EGQKCudSE.0-1778590246.2074974-1.0.1.1-59FFjGok5_uJtLMf5r4oVTX2a7kqKvtg2Wgz070nNrrbi28bY_C_XuXqNdyQFW724TpoL6.eL2kagclYO58282i.VKQCLdCbBUaq_1GELmDzQbHjN1h2zpJBGggp5RLq; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqX8pgZ9yCpkXfeer5t6kGgBiGdPhA4RVfLqzvMByP4EaSIdqtYj0iLT8kR%2FouRHeQEpPcUBgGGlvRfP3UdBjUtCdl0ZtcGaxLIUDiFmo5psDRp2JiidFEauI4ljDsuZeNeoCzdoTCA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0ecbe876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1674020,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 440 x 310","md5":"66aa2f52a646c445a5123120dd8ac691","sha1":"134a7436d1f73cdfac2622fee0a466254a2b34f6","sha256":"24fd3afe2c670d80c14c01bbd57faf561b0c5f59621d47ffac70819a143c9e0c","sha512":"aed513c4ee5cbb38a71107e62f77616a5848eaf57e4aaffa80a7320b75aaa4723ee70be6bb6dca8d9d4fb924e7b205a9553408e059fbed3cdb1df594a3d1beb3","ssdeep":"24576:bI2C0mHzJ/H46TZjYE2ScDG+Bt5uC00TBl95E2:V2tA6TZ8IcDG+5uylDx","tlshash":"38253302792a60ae2d33f4a58faa5bc2fd0f7d3c4d14d0fd16167099b8791bd188d2e6","first_seen":"2026-04-21T19:21:58.037733Z","last_seen":"2026-07-06T22:32:46.617784Z","times_seen":7,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":290,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.B8U2wfjY.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/10.B8U2wfjY.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEguTPtrPcY6WDlumKwmRBIhCYr08hqtW12XLGYXxa4EOJVFZOEBEPSo5KilqbbZf82vtkpuo1Y\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\nx-goog-generation: 1778587684449360\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 135409\r\nx-goog-hash: crc32c=09fYvQ==, md5=6/zNWwVWt/NwCTfENCNPkg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 40116\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":135409,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50220)","md5":"ebfccd5b0556b7f3700937c434234f92","sha1":"f1949fecd9d3b9954310b0d5bd5beb75282a71dd","sha256":"6d43875cade9d2b3a81eef3f3ddecac90ea8bc3ee21691a4da98e70df41fc13d","sha512":"e1d6a3a833081daf449c93907ce27802e37c8e19f26baab07e756094a8f7d75958429038f5f7f20ab28731fc777a54fb96c5b08c719390f78225996e5b53c77c","ssdeep":"3072:vWCPJAo1gbchIp5p+P8fiCkC8xMQbiHBmq2/j6/j1JK1rbaf7B9RBg:eYVgoq+8fiCkC8xMQbiHBmq7JK1rbafU","tlshash":"67d35b943282f57087f39097a87f530bf2b92d58b409d930e4b8f4e975e4146e1a3fa9","first_seen":"2026-05-05T13:06:27.407961Z","last_seen":"2026-05-27T10:53:40.830938Z","times_seen":1896,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index.es-DtbtQDLm.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index.es-DtbtQDLm.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:13:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 82088\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QISM74d6OmjL0dihvARiGGusuSUa%2BvA%2B%2BBDy6kFdmh9jcsYYTKMaGe74Y%2Bli%2FY2EEqHsUO%2ByWz%2FaBiwhIX4YtFEDncapWRGMHgJKegyVnrh0LU7Rw%2Bf5%2B6KEFy84sLSOowzzEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cff8ce356c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":295291,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49500), with CRLF line terminators","md5":"0444bd8dc6abe79ca5eff79877354386","sha1":"80e565557fa25d04a7f71cec8481ea5c914b622f","sha256":"f08f94733e6ce7f9e922b5dac51d7e48f438798a4549f6f864796ffdf526a56f","sha512":"6d179696c2fade282b92b7b3b81bcb745b12f4745b6ccda17ba0485f013d75c9a03a9c3f87d3f77487e5449e959b16df313640136d5847bfeb21d99b7f4a2085","ssdeep":"3072:bzCtURKZdQZvAUmXKAMJtSu7vYK9u6INn8P1jbJphlzfloqFnN1Nd6UoY:bz8UkdUAUvJJMcvYis0ljDFN1Nd6UoY","tlshash":"cf54fa8472a7f47543d665a8943b1542f23a5c64700d902cf6acfceebdac4499a3bf38","first_seen":"2026-04-30T19:32:29.772123Z","last_seen":"2026-05-14T23:49:57.490199Z","times_seen":6,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/Sports.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/Sports.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=4idUl8l9XqV56BodXjfE9f_K7EbagcwdzRz3VYQ.H_0-1778590244.1386328-1.0.1.1-lf1TsR24kdaKAfQO6rPB.9DOTP2niV9jpBbC5h1LS2o4aTDMGOfvscjDTTB90XiZu_ekJzikt97T3ca2rqsNapfs5iOt2p.iN_h6LVPkhn3tcpurnRHcmDZX9sxLyenu; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cv8GC44ARqmJfZzDQlLsHqL%2F8MtljR9btWLJjqmA7znXJ9bVWYa9kxA8tBm4Vwy%2FI%2BQ5xFee%2BIeSy5rPnInrZaeHXkhd4x0kfE%2FAwhoEl8nYwRz9bMZ%2B5PWWKWdj0XiArdYRgNNWtkY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686657a7-82e\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01db05b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2094,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e98bc5be7f5882a72abf78d11dda926a","sha1":"d835544d895a4817c210e575a6a99e08c1e2f095","sha256":"bc7880489b92bad21b9475577a93515e928dbc3fe62bf09e014e973e124ed223","sha512":"966b29438ae513d771a33e04b1f0566a70d205ee6698d6b2c7f1b00c7e263311652d392fc3f4251256866bbc2b0abf0dfa35698aaef8bc160847938a33a8a184","ssdeep":"","tlshash":"3d410018c3b983facc45823c5035a5b83a4e10ffa8a0f3b4996e95a47a420dc95cd6ed","first_seen":"2025-10-24T05:32:28.392126Z","last_seen":"2026-08-10T15:32:58.589166Z","times_seen":66,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":58,"dns":38,"connect":4,"send":0,"wait":87,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/856d61ff27eff50da50ec43ac2f89588_casinoGameIcon3.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/856d61ff27eff50da50ec43ac2f89588_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34690\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Sep 2024 13:02:03 GMT\r\npriority: u=4,i=?0\r\netag: \"66e82c4b-8782\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ye7BKTR%2FJlkhRJke3EgObHAFl03STGK03xqu2UmST37CwLRoK03AuhB4UxDBHW3U6Phutp%2B94vwjag3ZllN8VrCpVuljk5DdDgUrUtAJ4%2FmAb%2F8Mhn4DlLL9sOQ2fiPXALlHvyD4EXU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0eab5776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34690,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d45c26293f4479ff0b6ea072428c3eef","sha1":"a0a2d502df3694905541c4033feb66ebab6b0922","sha256":"d75768828a534250a8e3cc0cea3a876672c62d10942c923dbfa459d4ce93f95e","sha512":"37b6b7c08fac0098870307ab0d2deae06a151568f50c8a9a05da519ecb978bbb9293a76ecd83d2e4db57bca941202f1d3a3f2c1536a0ba511f2b5075172173de","ssdeep":"768:6hM8oLLlRjJr1tUKh7WVrhTGmziSJDcqIgXMWHCBY7ir7Pc:6DwRjtU02dTtJDxIWCy7yc","tlshash":"a6f2e168df24231afca528db657539c43ca17ce9ec5229ed37ab124622417c11b38bbd","first_seen":"2026-05-12T12:51:51.113783Z","last_seen":"2026-05-12T12:53:30.014329Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/d87d4a4b0cbbaae5854206d887639f0b_casinoGameIcon3.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/d87d4a4b0cbbaae5854206d887639f0b_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35688\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2024 17:36:59 GMT\r\npriority: u=4,i=?0\r\netag: \"66e9be3b-8b68\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5RyhyLCEuDhRMKVkVzDAXqpmcXCTo0DCrLm9jng0VqxOW54opwp9PVhaqdC%2B938x9BTXEbRqUbPtkIFNVAB9urUeUZTmAGh0inVVN5BEbR9iFxESZtNqropsRAuLdRMesxnFnsyKI4w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0eab5a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bb8b969c073a78770ed5377883c2fd1d","sha1":"fad026724a63eb8bafb60f0b3ac6be78d2ea9d84","sha256":"f8c30756a8cdd733d14d1ef6765894bd5f62fcfa8f04b9a1724626e51458f52d","sha512":"98df83ed08109611cbfc81fd8aa59ac29f46802dce492d0422eed8a0f78b3737a2a93c1fa9fec0d8620cc66bf592af3571bce3fd3b8514d103bb3db9a3500286","ssdeep":"768:MWcQ5cSUw4y4m90Hk8rbyFh9YMmAu7tW+Jqq1DnbH/T44Lu9kCJ:LcQ5t4y4G8rbyFQMmnnz/Tc9L","tlshash":"3cf2f1a279101a359d21f83cc1914d187880a7b4b08385adbba1ffd0fbf511ee239e60","first_seen":"2026-04-30T19:32:29.852568Z","last_seen":"2026-05-12T12:51:51.115277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/img.png","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-05-12T12:50:46.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:12:39 GMT","end":"Tue, 07 Jul 2026 23:11:19 GMT"},"fingerprint":{"sha1":"90:7E:2C:27:B0:AE:B2:70:1C:09:CA:A5:EB:B0:ED:3C:FB:33:60:E6","sha256":"D1:CE:FA:9D:79:3B:F6:79:1D:CD:A2:97:87:52:B4:4C:7F:63:B5:FB:4A:22:66:FE:29:5F:38:F5:74:60:9E:46"}}},"request":{"raw":"GET /img.png HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2026 12:50:46 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1iP81g1gqH8w7u4rWqUrmRUULLnBYLKcUlX3rceiMphtfPFN8Y9NQingJAsoJcI9OEcVzCvUvR2asucGhe2Ld0PiZHUmjcgYtOByT8vYtfIjhrJGUg3dZe1p9DB60sodZ5xa0Kdllgwv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9fa98d0f2f31b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"2ad3a45d82e0940f4c3dc90088721bdd","sha1":"a85bbcda89334914c332b2315aa94f32c843c867","sha256":"bdeff9d8a5ad9b3cb7dcfe91fe91080359bc5a836d18d2f78e1d308c412d87b5","sha512":"06a4f493c0b3fe9ca7ecbf17347ce0aab1e3447c4c62e2876b945fd13f40140cdf11b66e8a799492d8709ba21ccd90c54c7c5f446370bbc7e2579d0b0477360f","ssdeep":"768:VQRzoYMic5jrKBzf/csKDh/GxEsBJWnO2iPRvzLsiWY:KpMVjOzcPVOKJn1iPRHx","tlshash":"3ed2e12fe1997b7a550136f649372eb5124b0e5a54c3f878c31c68a8c217b08cef5ab9","first_seen":"2025-12-24T22:39:16.249591Z","last_seen":"2026-07-19T15:19:37.892402Z","times_seen":86,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:47.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 21 Jan 2026 08:14:20 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: J8ajF9t6IlT2U7tuuuuEWLpJqziHNggp\r\nserver: AmazonS3\r\ndate: Tue, 12 May 2026 12:49:17 GMT\r\ncache-control: public, max-age=120\r\netag: W/\"26d5c6e9eb5b8acc5d7f0a4acb0bb17d\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8b440cccbe8a332306f650e1ec8894ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: HeVPoqro6hPQXfTys3bBatf2tgciVwInSTW6RqAg9cAgMUC4rLsLVQ==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":108916,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"26d5c6e9eb5b8acc5d7f0a4acb0bb17d","sha1":"f28c859ece3ceabce922bbdf6272f9f7e826b783","sha256":"8ee1aaf2ad1cbca21e0581993206ba9ffd736c611beffb7287581a87cab67ff3","sha512":"388bd8e7a24945d1a3db30cd4cc03f006d5222f5b399b6578eaf9f87707fefae25b423aa0657dffd191f980827742165f1cfe7577a899ac63ed728bdd9886ee0","ssdeep":"768:IAObYQP9MBTSbyDRP0aubWc+ZdLyiQL96+hYs17eFCgt/oJBpntD/PN/xd0MpIJ4:TQP9MqMZ+vCBF/g0vmBuNfftrcuk","tlshash":"8fb371c8f6d6f064439764b4803f510bf23eb96e680e8464f266dad26c7899d9133f78","first_seen":"2026-02-24T14:23:50.976435Z","last_seen":"2026-05-22T17:22:58.310306Z","times_seen":50,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":73,"dns":53,"connect":1,"send":0,"wait":24,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e6581","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"216.58.201.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:47.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"GET /gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e6581 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:47 GMT\r\nexpires: Tue, 12 May 2026 12:50:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157901\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477047,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"30b0dbafebd86cea32ee7cc4830de0ee","sha1":"11e5454e18001fab895164bffccb75bd2755e50d","sha256":"8b0803a487a041e26386f2f34c3177d832420d1a9db344cd2f1d2c28b1af958a","sha512":"62aeb0de2e7f2b4751e203bb3ae4b138b4cba1106c5a3589344b6b1c5c2150c6c51e2bb0c01b795649f27139292113059a3a516c99e728e3fda50faa4298eef9","ssdeep":"6144:dUqI1BsYCw1ou4wa+WhSom68/91XD1Chgan5UAyb:IsYpou4wtRwga5Yb","tlshash":"aba4e6cdb3d675625396f478903f018ba57b28a2b44cc899f189cce42e7465a4237f7c","first_seen":"2026-05-12T12:51:51.118398Z","last_seen":"2026-05-12T17:10:48.610575Z","times_seen":3,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":40,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/Firebase-PdGS33ax.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/Firebase-PdGS33ax.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14627\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9g9Rsr3O9OEoVLnkfAc2W6MSIex1SovtGf89oXwYsmGBJNKBwstmal3%2BonCK2lqHiM0ACJ0zSkFPkRePMH3eEHwNJ1ml5hA4D%2B%2FrIWdgjwea7Wmpe5FUoloEnKb4i%2F8TnMuLaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d020d1256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84994,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4779), with CRLF line terminators","md5":"e71d3b9ca88b858220b5cf74b78c49b1","sha1":"e32147e933a304a1db430ba00b24899509424542","sha256":"fdadc427d7180a8799bbbc2eb139b2a5d8f0b20cef32135f74653ac9239f565d","sha512":"a32042324e8523c0dfc515aacdf7cefa7196746510ab82481fea71ee4e97fe109c29efdf3335f20cc0584bc802f2f458162540889a630f0e7e1b5e88247b9980","ssdeep":"1536:73B1pIuKtjc7sMg/uwIPmWP+pFxipJYBystMLCv5pvrYMUyem2Ps0cRG3oMLJjDi:7R1pIuKtjc7sMg/uwIPmWP+pFxijYByA","tlshash":"bb83b4bd7ed1363317f085af792f948be219c658280f9394746dc1d91e3a50a42faeb0","first_seen":"2026-04-30T19:32:29.747316Z","last_seen":"2026-05-14T23:49:57.357985Z","times_seen":6,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/10d355c0d955894b04975ce4730583d5_casinoGameIcon3.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/10d355c0d955894b04975ce4730583d5_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26646\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Jun 2025 11:12:19 GMT\r\npriority: u=4,i=?0\r\netag: \"683ed893-6816\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=aspe_RFufwutl3T1PgvhTJirJG5U5GM4qGw5AbUvKt8-1778590246.2058103-1.0.1.1-CL2qJ1PP5gY1y1NkCGMfT7rNG0Pbvug9XAQGPDKxBp1MmfmhQJ1CsaaSKqWL42JRqbvw3GpYEnTAkCYlRMzmiyfS6mUjuJJWPHAKx.9t6HckGEfBXD9R4j5559H43_38; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZsPxCujjsP9GyB55NAZ7JVDBqbqNon74eKyvgLTdc7uwMx2WgDu65ZUT6qrpx53KcuZI33kQuqcfj9QzKZpuAqNGBcRz0tELu%2FbWgLyndJFHo79B4tNPrgyHHxfh%2Feddw1mlJ4hAMk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0ecbda76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26646,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c8a81fba21bb7daacd4818d537790481","sha1":"029b93176751664b33971c26fda5d49d623fb2a9","sha256":"b6f8443c72fb60d24e7537917121db1f7cb9ae5f3aad1259e6df36fb3f6f30f5","sha512":"9f3b5986316357152ec059d4601dcab3d3f5086cef8aa9e8fb8650dcbfc01462d29b206a338fac97d1cc917de874c83850cd1e02266d4e9f87fe6b92f3ba9b26","ssdeep":"768:v0YdTni0dJP6qr2B9pnE4vTw6O6YZP9qf0D:vH+dB4oTw16CVqsD","tlshash":"01c2d09fc6d4791b681d3378baac35c2c63475d623abe865439bbe57800b959203804e","first_seen":"2026-05-12T12:51:51.119855Z","last_seen":"2026-05-12T12:51:51.119855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/bf14c645e1b4175cb7d9af759b02edd1_casinoGameIcon3.gif","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/bf14c645e1b4175cb7d9af759b02edd1_casinoGameIcon3.gif HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/gif\r\ncontent-length: 913720\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Dec 2023 11:24:04 GMT\r\npriority: u=4,i=?0\r\netag: \"657ae5d4-df138\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=outqnUxg1nIPFuwHFuMOqFrCYQKFYyUxuAeWS.x3sOM-1778590246.208247-1.0.1.1-yuhX9hjYewWT_j0Ucd8E9Re0kwMxOfajU7APzKkVSb8YLyhnn0ctR5zRU17Umku_LMO8Isr7C.llExPqxo3hcciIODRhsIENTccf5xDQYsDeg3HQ3596_B9FGfGQRcjV; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nFpsg3si%2FKlAhAU1fx4JQ%2FL6JRVIkf1l5Mub%2FgQ7WQ6FWCIB3dojoyPplB%2FOWWGsH0WaPm3xlyeJu3UkBZ8g7lUHnyA2m9Hp9FN%2FQU1aOib7zHBKKdYruw%2BFvGxsC%2FiXTcMcBqawktE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0ecbef76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":913720,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 440 x 310","md5":"909666f6746ef431d37304c58c6871e5","sha1":"50f9549d49c701c3adad42a5d176a4a9a07be6b2","sha256":"aa20abf1bd815b9e7248a8cd3bd1f83078b6d123e307983a11f44bf82dc14911","sha512":"0ff510636e04a51b2987ca77bc71eab1a1d282b540ea5e0d87d6942044f0f54b1ae842ae9e90243c9035a77dec155b1a3a5ba36fbfcbdbee076419974d27f1fa","ssdeep":"24576:9ayMCZ8OBrb1/N036zWjxK0hakTC9Itg/UEyJWlHx:peGUk0BeSg/dyJWlHx","tlshash":"d71533d4901fd402c07267e285eb66497fc1981ac7b4c9e7d8b31393c62817ae68fe53","first_seen":"2023-12-20T01:06:50Z","last_seen":"2026-08-10T15:32:58.807308Z","times_seen":106,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":404,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/d3fd86865a63008638ab0a971b6ad4f9_casinoGameIcon3.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/d3fd86865a63008638ab0a971b6ad4f9_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36548\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2024 11:55:54 GMT\r\npriority: u=4,i=?0\r\netag: \"66e96e4a-8ec4\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=Y7xutbUjYuDqo4i37HZPjT9MRWQfiIfQtnRzpiWt6Cc-1778590246.2088504-1.0.1.1-Zh8nZZ_NgxKA1g_ODjcti1UVLpv9UJJMJuZR0cqdL1My3HwzQqzSF02x7hXiF1iDelmPuPVv7OUKMfNL8Pa63TRjcZoqjBjzhneocvsajbTrc4wrAbTgZOCqR5us3tha; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0c6P6PfkczRTC1xQSuL%2Fy7aSMT0Diizu%2BmWzcjiTXQBgAab8tFNZnKXz8M9WXKebVPmVy%2Fkq8hZWlyLWwO88E%2BsFVzRjwz%2FwPRSYljO4vu42zJo6%2F6btzDPt2b4vuXHzIuZ3Tmyc4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0ecbf276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":36548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f2a7b9ddc903d992c4e1cd085e3691db","sha1":"6e7b3fff627f67044f21637d3c8ab237938513bc","sha256":"5686a8e597f49452347e087cdfb95e5c6647662b99983ef39563eefe66086e25","sha512":"34860aa7628bb324e7c1a57c537b3604a6ad475c174ba94ea5489479d96769320ffac9ce6161f2dd289e3e617ee0b85be71d2fe1cd06d0606eff340caa183061","ssdeep":"768:vM4Jmz0uTGV3a3lwH2YtNwlEWdVzHaV0zZ+apxi/PEtrG:Ke3ablEeBaVcoQ0/PoG","tlshash":"56f2f2ee07233fa6871cf137d6c38c3bc9d88e4bd186c9666ce14150c5216d867e5b98","first_seen":"2024-10-06T09:18:54.173516Z","last_seen":"2026-07-11T15:02:23.938004Z","times_seen":24,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_1e0032d5ab6bc47ae0ff53da48c1e21a.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_1e0032d5ab6bc47ae0ff53da48c1e21a.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18886\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Oct 2024 12:45:34 GMT\r\npriority: u=4,i=?0\r\netag: \"66fbeeee-49c6\"\r\nexpires: Tue, 19 May 2026 12:50:45 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=573SwNsbmXja6ofTi4tjaWOxaZO3Sn%2BgLOBdNDKQ65Ftxy0t9TM%2FQ30G%2FkyRCnHDnt3PXBoX9ZDhYzOjJPV0bw%2FJ%2Fal9Y0L%2Ba4pPf2vm6hl7z8%2FcOHyZF%2BYS2G6ULq3HlVJPJi1JpQg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c2b9276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa5bb675b18fb9ff6ebcefc6c52b2b80","sha1":"aef0af185eab795ed1e66b6fd386bb2bbdf99a51","sha256":"9e57aa30fe310aacb3a5660d08ad36e93609014c63ab91e2674217cc81ebc5b5","sha512":"bda4926c3f51a68f3466aad782bb0e212b59ebc698591699ce3927038ba8a8dfbd52ae66535da875700c6ef2cbbdabb67fdab3a92629c17cf2bdd2d909459623","ssdeep":"384:uTMJDMzfI4dhbysbrfdO/1rYKo5nvpEg8SA21BvLQzOSMGz:XJozfI4/ysbr1O/1AvlD1LQKMz","tlshash":"4082e1099a7934e9329308fe1b21614d31f03ab66c405758db7ccbe410c1d956b6faf5","first_seen":"2025-12-24T22:39:16.22703Z","last_seen":"2026-06-06T23:43:56.14056Z","times_seen":55,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/515.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/515.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1029\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Apr 2016 08:12:51 GMT\r\netag: \"cb921799a59bd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 22:42:31 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 50894\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5QPYGiPzZ6ro233kgyB1%2Bd4XdI8R3sKc%2F4ODLwRcIJ3w9o0NRV8genjCqeun%2BC%2Fx24r98pVVLYd7%2FfbMr7YZec2iRoAvUpw0Phe6YwAQWpilSfyNglWPh6N4qv4wWDgcOnLusfgys6uBWt7OEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7e01120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b29efbd9f9238d7495c60128a784de11","sha1":"7dcfb12c2a20818967e6d575634d7f6d327f351b","sha256":"dd1494722d6d16803e9d5a22c22c9e1239b1251899767eff66181bde7dcf0b41","sha512":"0d9abb38fec12198c30ac99c6dc61078d5090746994a4b02c386f55cd1e8c182076f3fad9f13bba233f66541e35d0223a7f9cbd0b9c2fe4bbd45a2f55e0d9f3c","ssdeep":"","tlshash":"4811827a194d3c3cab4a656604234465b45cabc8b362a329b35284301916e98299cf63","first_seen":"2023-12-09T10:58:08Z","last_seen":"2026-08-01T05:50:49.427725Z","times_seen":273,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/1/2008.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/1/2008.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1473\r\nserver: cloudflare\r\nlast-modified: Mon, 14 May 2018 10:18:54 GMT\r\netag: \"9f9028f66cebd31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KumBh4PNFIDB%2FJFe4R54f6n8p1FKt4p%2BoSlJ3yArKWTblu3m%2B9iVNiyjdDkyoC9TU%2B5gkS2c%2BY5Ls1wmyqVxI2dPl%2Fq%2Bae422QrSFMikrtCTRcc%2Bqpmuie%2F0HYkwHhMB0o6EBTE3nPCeHGqdzg%3D%3D\"}]}\r\ncf-ray: 9fa98d0c9d6c56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"201da3d078b4543c8f4a8832be7e69b8","sha1":"09dfe82c6a1684264c62c91b69132ffaace2fef9","sha256":"df44990ca9375e661a2ecec2d0dd932d004acdd12afb9530fd56ed4578b55f05","sha512":"11a81ba304b68e5ccdbc76a129c54284dbc7ec00d96411b075b38c320817dacd9a867aefb4f2829a9851b9e34ff91ef3995e8beca7e9793ad8c4a1b184f3938e","ssdeep":"","tlshash":"dc31ecd339946c6cdd0fca5673ed35239e7762f105c855043a15e130136d59750f7923","first_seen":"2025-10-20T07:10:30.745853Z","last_seen":"2026-05-12T17:10:48.414662Z","times_seen":10,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/6bfd9da72ea14d44ce27fb1388df5389_casinoGameIcon3.svg","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/6bfd9da72ea14d44ce27fb1388df5389_casinoGameIcon3.svg HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Apr 2026 10:03:19 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=eg0idbWyNPVbppr_H_L9FrTBb4erviwSdO.T.66.34s-1778590246.2098925-1.0.1.1-kHWgTzWoi4DkoVXbzPiapw1h6_j39jcKlNh8K0mtxMiM9VDC00fu51oN0Vg6gwGwedZJT8QcdI7YkrT_KjVoYNc1TObyGzGuRHqfHN5qTxZ.EV8eAJ9jIMuAR_UYz7KG; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cEXdriKEwOkhTLnB0lMGEac15AyvhEBqQczmuDJn%2FZycQi8qiSOETxxfub2G7Sz6UAAlGphXuLg011Eujm35o52CPVyvQBMxr%2F6cmTPxtoOiMBR6O4rAnfrjhJQeNEjzGse%2Bnzldbkg%3D\"}]}\r\netag: W/\"69f328e7-3a816\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d0ecbfa76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":239638,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"876a86f4df2e8d750dfdc22626399378","sha1":"7caa986a7fbbd1d842843354c093f3e9f48b8d5e","sha256":"5e322583379c50db3d460621a517a78a111c85ba04958c69cdba6ba1405de3dd","sha512":"6aefc2c3ed889e50c07c12c9b853af66223c124b00696694b479258f26c418f679289b4acb53741f848d5fb9a8dffbe2be5255ded3b59a1f1014bb40c7994a52","ssdeep":"6144:uibmdDemTUscm+oN20GIg+/DtN+5VZj/5bLhp3f:hsc/o3g+P+Z5bT","tlshash":"3e341278ec07194602894522f3cbba780c7efd7341626c667bc1198b3dc8696abfd54e","first_seen":"2026-04-30T14:14:09.132179Z","last_seen":"2026-08-12T20:46:59.246157Z","times_seen":65,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/883a1f27d85f/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 19:45:24 GMT","end":"Fri, 17 Jul 2026 20:45:20 GMT"},"fingerprint":{"sha1":"55:E2:30:E2:B9:65:08:8A:5E:4A:A1:AC:70:12:E1:69:10:5B:88:0F","sha256":"34:8B:B6:28:AC:C0:28:44:34:51:7E:85:03:E3:50:1E:04:E7:48:B4:99:11:CB:23:AF:24:CF:9F:63:C2:C6:1E"}}},"request":{"raw":"GET /turnstile/v0/b/883a1f27d85f/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 11 May 2026 16:45:17 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fa98cfe9c1235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64227,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64226)","md5":"35b1d82e5ee89cc581e98f4618de7a15","sha1":"c06bd8849516b62c229a39c1d928e4fc5fa70d02","sha256":"d3adb810c5abb24f5fb5f0397d7206658aca0b3177448f7484619ddc3473526e","sha512":"a5c4c1c07aa5993f9b2758e5e91e024b2feb19aaa197678151b71c120bc18e5950005c5f9706cb777bb925385a5b8f83a304c17aa1976cae3ba5c955b5738244","ssdeep":"1536:T/a82omubKJDEzxv/0iKNLVensyQTXeegsiHVj:Zup4yVenZ+eU+j","tlshash":"92534d987156787316d980f0a17b670373267d3aa94cc890e817d8653a7cdca9233fbe","first_seen":"2026-05-12T09:01:59.601109Z","last_seen":"2026-05-18T09:32:57.236378Z","times_seen":8564,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/menus/app_menu_751_tur.json","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /menus/app_menu_751_tur.json HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 863\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1k9lrfh1d4LIXGZiU729PukbG56gg%2BtL3X%2FMOeppeQ3cfCzRcMVjiZljO3vbF2u5KIw8X19Kp4FTzycan6lafSxwfBCAx%2FQU3JSUnor19zsB6kNPYLCxI%2FSkq6qzE6wefulrqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cfface956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6875,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b6b057658eb49633bb9588312b77e510","sha1":"40b677e0a92d2996a46dcc3e13ff12e99865a327","sha256":"25ac55312bbeb315379ab94f9286f936c1127249b6b3d91d923ad2a67ff49108","sha512":"ab7132f452f877f34035cf595fa7d8cb01651905f2267b2600b82ef99ed9634a75c29883b7c2e4a21f975379de2800ef9dceab2de0cc423e5d3419311a4891a8","ssdeep":"192:SSkcUlkiU+kuSkAUdkuUQkZUckTk2UUkMUAkQekIU1kvkq/UKkJUdkpBSkGUlkM4:Svuxuvi7iwbpKCMjHfv8MvQqzaKTi","tlshash":"03e10702f01d5976d30c3e00bcc76d5b888e50996c9d19419e4d8acecbd649fdacb6db","first_seen":"2026-04-21T19:21:57.967314Z","last_seen":"2026-05-14T23:49:57.505834Z","times_seen":20,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1074.com/api/public/v1/tur/partners/751/popups?type=per_page\u0026platform=0\u0026country=NO","fqdn":"go-cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/popups?type=per_page\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\ncontent-length: 470\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=XoC5pFvj6Tjj9nBgxOvf5HudDnVYXZMq6ucuh1zH55w-1778590244.1886923-1.0.1.1-LBuSmZWcUYz1IaximtCezfNUkj6dlzRVeu3.Isngf8Ysl6h3sXhKTirzA5MdAMJ2nVJV9TOT4xZdAiGuTjSIGEqnj_dWQM6I3AT7DJyqp8gai2GOAT1.qEzsQzgRhauP; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HUvyUASHhljVv7RGIHfgSPB7NYopoKIoDc4GxfLIkehdG0%2FqaaTPU1gjCZBTUyOxgwxgsIfv%2BdwvvIZTi33yCjVllAOUo3RfeQ4GtU4JlTZrOYQvskHmoVzIhWp2S8FoIhHB57tipkCH\"}]}\r\nserver: cloudflare\r\ncf-ray: 9fa98d022b75b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":599,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"89725c249b7125b7ab617af170d4135a","sha1":"eb7944ce8f977cea298856a861fc631738220177","sha256":"a0c0e0b07bc6e58fe0cb241be67f1ba7f9e174de58d19601b5b7e9844d400beb","sha512":"71d5edc0b72ae95adb0ea4940a8e89066de34cc9d9aeef4875557dfd7019ef1540dc61c6a85ffd0bd1dbf8e75f2e26534a55d64ccbd8fab200ef4415f77626b1","ssdeep":"","tlshash":"76f00c277509c8219b0529a0a0c26d4a4cba2d26ad0c9900af9f8b9c8270614ead345b","first_seen":"2026-05-12T12:51:51.128046Z","last_seen":"2026-05-12T12:53:30.082086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.galabet1074.com/storage/medias/galabet10/media_751_d95c491056861c55d9808002ec3083fb.png","fqdn":"cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_d95c491056861c55d9808002ec3083fb.png HTTP/1.1\r\nHost: cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=qX.LimTLO.s3W_fndTwRDzqGGOIV8FrPAp2EILEHE98-1778590243-1.0.1.1-CqbXymCriyApEVq2_T8QmDKl.LlPHzsGV3wpiU7m_Pq1wCdiqMA_Z0.Gkrq4O38LI3E2YcspcW2j8wWY0DehHU7ENyCT4NNfLpyWi5hcqdU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2125\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Dec 2023 08:21:59 GMT\r\npriority: u=4,i=?0\r\netag: \"657abb27-84d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=wbplXKCj.s2r4bhs.1MDjZ2iCaFlh3N_S1orvmeSAJk-1778590244.372432-1.0.1.1-A8L6PIqIK3BrU9QaRFqdboScNCQr7kOoekOuOTi4huarw3ZIETfKFjPawhT0EWIZcJ8k7xqLYfDl88FbpQ3lynuCghjE67zgSj62GPuxy3rOjGB_qjAf_9SY1vXNvRxe; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mcWgvv8J0qPvnPnGLGW3R%2BbHgDq5zBxivjEXABpP1f%2FvXkxcusRYSIi%2FXRG4icmksn%2FuBCOGY%2FqR8F5g30vyQz06lLIIjoesEg%2BEGiuQfM2B136XML%2BH%2FzkkM5SVrwGKGi%2B%2B7iSK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d035ded120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"d0a6f672bc6bd2e097de029109a7577c","sha1":"228e47b53bf80adec61493761d90165771a81012","sha256":"35dc3f8b307cacbf717f898b6a669c2eb188cc425a1f356b94132ebc7e8441c2","sha512":"7a700fc3f2a2cced35def804efb78f631ae965591bca74fe55eb23a593f5cd77cdb31f9f947e8614f0ed1d67cd29c3b25797fc46d9d22f6788bedf34d84bd8a2","ssdeep":"","tlshash":"7741eaf57111586cd591a232475cbdd2589db408d035d507fea3ba2c7c3f17814c32ae","first_seen":"2025-12-24T22:39:16.220215Z","last_seen":"2026-06-06T23:43:56.132258Z","times_seen":54,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/486.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/486.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1456\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Apr 2016 08:11:58 GMT\r\netag: \"8c938c79a59bd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSUP0BvQ4nBZL19UqAX71fhEpPv%2Bp%2FLJ4bgRp%2BBuwTdr1c4V5toCHRfiIgZ1KvjEadgYE9NPhsT%2FTmS7CJVYDd7lZdKcE8cE4%2FttTHNF7xbZ0d6eKnkQ5geIxSRrtWDdzNrRIcdApmWrEFwf1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7e14120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b36a652ab794d24b48c8ef2d3eb3b8dc","sha1":"aed41e861f003b2603509165cb8b6e49912f00ec","sha256":"2a2d0d0d6411b0736f0571bc81d3386c1211710f52a4bcdf862be98575928d22","sha512":"882f70bda983b4128856ed57c79e04ac2a8412bcc318124b1d3c236a1f61cbe823414132776116011951975a1a205a4679c21d6df04a9cb39e71717da6356455","ssdeep":"","tlshash":"f53119c9b2eae4054c7f7c6dab0b4b676872ec2385d01d073c4186184949c38c3e034b","first_seen":"2024-05-03T07:44:22Z","last_seen":"2026-08-08T13:53:53.909514Z","times_seen":258,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"dataspot-wss.galabet1074.com/socket.io/?partnerId=29\u0026EIO=4\u0026transport=websocket","fqdn":"dataspot-wss.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /socket.io/?partnerId=29\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dataspot-wss.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.galabetl075.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: HReU5wf9TcCRDbZRCRdS8w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: __cf_bm=outqnUxg1nIPFuwHFuMOqFrCYQKFYyUxuAeWS.x3sOM-1778590246.208247-1.0.1.1-yuhX9hjYewWT_j0Ucd8E9Re0kwMxOfajU7APzKkVSb8YLyhnn0ctR5zRU17Umku_LMO8Isr7C.llExPqxo3hcciIODRhsIENTccf5xDQYsDeg3HQ3596_B9FGfGQRcjV\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 12 May 2026 12:50:46 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: BJgvM/7BroFcDPpMNT28xClLUnk=\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: io_affinity=1778590247.818.518.478428|a4492465e2c0cb857f789e83929ab8bd; Path=/socket.io; HttpOnly\n__cf_bm=WCbyG3ZRWcjrhuKhjQ2eUJwYDC5kwndgGguoMdEjavE-1778590246-1.0.1.1-bMESR3a_Ez_sHzoJsuvJUZo6rRkqZ5nGJcxUda0Sdrv4z_8ZbPd0KT_ajSA5RwE1n53vJRMs4kOs7Wf5tSm5vrYihQCnWSo0cd4Wj3BNNXA; path=/; expires=Tue, 12-May-26 13:20:46 GMT; domain=.galabet1074.com; HttpOnly; Secure; SameSite=None\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZieFech%2BfVg%2FJvaWvsuzAyei0GQW64DStcHoU5fygF6xXy6EkkiMn6sUHPz4f9Ha4Gi5uI7ZhmSbVi42YnCHPT1R2j2DurM1HTmtxgQNyU3wuu07TidOk%2BXxv0f7JPsr%2Bk8QLHxl3DuYuMsVz687\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9fa98d120e415695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=679\u0026min_rtt=637\u0026rtt_var=201\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3124\u0026recv_bytes=1437\u0026delivery_rate=5498734\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=0cd1940bd6d8387d\u0026ts=134\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":4,"dns":140,"connect":122,"send":0,"wait":113,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.eu1.segmentapis.com/v1/p","fqdn":"events.eu1.segmentapis.com","domain":"segmentapis.com","tld":"com"},"ip":{"addr":"54.72.127.119","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:48.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"events.eu1.segmentapis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 09 Apr 2026 00:00:00 GMT","end":"Fri, 23 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:2B:0A:D0:B3:DA:FC:06:F9:B7:DB:A5:75:3A:61:13:22:30:63:C4","sha256":"D3:09:11:A4:26:13:76:07:B4:FC:A0:69:DF:1D:DE:76:68:04:AB:C2:81:30:80:5F:DF:9D:75:7B:BE:35:D9:7B"}}},"request":{"raw":"POST /v1/p HTTP/1.1\r\nHost: events.eu1.segmentapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nContent-Type: text/plain\r\nContent-Length: 842\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\naccess-control-allow-origin: https://m.galabetl075.com\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"90749a50019a27e1f32cebdbaa7a1bc1","sha1":"8329e3339f928f8591024bb0f938dab99c0ad4b8","sha256":"12f71cb993958eefc4bdb41d7dbbda490779a9c7aba448f7be52bb63912e0254","sha512":"b3959e671f729eda8aba59886df18c60ed5a768a3357dc09b29069b0da9c9fad7073d0072dc47f3ecfdc945351fe82ad3b653dd5d79d01096e5ae8bb42af2bcc","ssdeep":"","tlshash":"b8700022000000b200a0b0020028a802a8a08c0880820028c00a000a8a022802082008","first_seen":"2023-04-06T01:58:03Z","last_seen":"2026-08-13T01:51:22.373116Z","times_seen":7432,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":290,"dns":27,"connect":36,"send":0,"wait":34,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:41.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:41 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 07 May 2026 16:44:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fa98cf10b6056a2-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-08-10T11:32:50.303112Z","times_seen":78336,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":30,"dns":20,"connect":1,"send":0,"wait":14,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/CasinoJackpot-CNQNWl4L.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/CasinoJackpot-CNQNWl4L.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8909\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=An08xCMShiMPyngpU5wXFMFU%2F8gB%2FHLugl%2FY%2BDN0RDa5%2B1cWHncozoSWPyEYCfZie1SPaVaUblfde1bK0nBAFa5WBEuz7a4HW8vPgGs9cUBy6B1E67AMTAD1FAFDsyPg9sD6ZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d042d5b56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14340,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14338), with CRLF line terminators","md5":"f05c92cebcc6128b6ce04f8f9183b6a7","sha1":"a8d7997f5441d86c3b2c9fc4d49a4e08f126406e","sha256":"6195afef82d1ca888e96d2b48afd9550af5ab3e31a261ccc2ceec0ce87d9dc1d","sha512":"4d63d5d0b81a0563aef4cfe3c1acf8171d6d93fb1f780e3066f8062a06f9e84e3dbd8194c55ed7f65fdcc368fb5cd1c64ae807c642461808aed2b6ce44c685bd","ssdeep":"384:VWm6srKqqF3EjFOFEGOpOpeHMtGRxeG/PcyKx29boP8FJdO:VWmB7CEGOpyts/U2bdO","tlshash":"a8525d05f012b7edbca954f7487ee0287a5e1aa9c71808bcd1bd6c313d2c855760b7ac","first_seen":"2026-04-30T19:32:29.89895Z","last_seen":"2026-05-14T23:49:57.375718Z","times_seen":6,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galabet1074.com/configs/928de3c284a560a4ec2990544700741b.js","fqdn":"dataspot-int-bucket.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /configs/928de3c284a560a4ec2990544700741b.js HTTP/1.1\r\nHost: dataspot-int-bucket.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=wbplXKCj.s2r4bhs.1MDjZ2iCaFlh3N_S1orvmeSAJk-1778590244.372432-1.0.1.1-A8L6PIqIK3BrU9QaRFqdboScNCQr7kOoekOuOTi4huarw3ZIETfKFjPawhT0EWIZcJ8k7xqLYfDl88FbpQ3lynuCghjE67zgSj62GPuxy3rOjGB_qjAf_9SY1vXNvRxe\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 28 Apr 2026 13:04:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 12 May 2026 12:50:44 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQ10u%2FGHvwMvVLbVuUJ1VoW%2Bot5b62njW9l2XW5t%2BfkLnv2qPNF7kJWSPl1cUnzzG0uq9jHdpb0MM0jz%2BBE0TY6uEPCfAVwjRWSjDSBCJnjsp4xC7%2F%2FJ6bQTSvcCOcSXeaqFBmu%2FQnrh1oJVR28MvSmQED9tlg%3D%3D\"}]}\r\netag: W/\"69f0b066-a49\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d054cc0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2633,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (683)","md5":"827d18e4ff621e93271b60634ab6c3df","sha1":"c84e0d7c38c5d9833aeec6d934d662e464028396","sha256":"64e2883bc2e63fd152ac0c71a10ee560ad2f14ad166ba108c8f8a767dd2e8c0c","sha512":"2e0e8d451a3906ca6d32b725297f36dc35b7bc2baa974bfe6797b93bca26e1714bcfbd29a81a7677fec58e63c85a1acfc7378d1ec410752ad2e031742c043c7b","ssdeep":"","tlshash":"d55179a27c511e77007d5435a0569cc0b425ab8b2a36dc5c3bce351c0f7ebaa51b5f8d","first_seen":"2026-04-29T00:34:34.779593Z","last_seen":"2026-07-06T22:32:46.539489Z","times_seen":10,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/490.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/490.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1163\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 06:56:32 GMT\r\netag: \"95aef59256dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJWmeSlaI6FjbsvEj60NuZ%2FXxiSrFsSgpoU%2F5pnsZ%2BqhLB0a8bGkL1aPGupWf%2B8I6Dx0OQYYHrtlIcaGCkJRInOcd%2F3PQ40V%2B%2Blp5wxyI0%2F1lWhcguYTEK5IkrsibgwpGACa5z9u9i%2BHG8b1tg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7e0a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"06509debe60aa81dfffbf004e08c7a6b","sha1":"50b88812052789ae8adefb196dce6cda6923e3e9","sha256":"4359d78708cb50dc84cdb0775b96308e45f49e6b84a41269246af6502514c70a","sha512":"0e29dbbeabf9c8484eb1233149585d6d41c3ad6d9144dc83f3a8d239e8b5f85208c12cf5e073158e3ed7bd59e0722a64acbdbc3a1c967ef9dab4ff27162b8ccd","ssdeep":"","tlshash":"1521c69baca1f19a48ad702e35701173432c22dda9e1649fdcf9e8342f6c7220869288","first_seen":"2023-05-28T18:20:13Z","last_seen":"2026-08-01T05:50:48.93944Z","times_seen":355,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets.json?v=1778590200000","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets.json?v=1778590200000 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 70\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gH4MUA22MJo3G%2FFiMm5f8TeXDaWRepKD%2FEJRo4NyEU9Noo2M8nGDdARsIyFG5HMHEYD4M3Ps0iK%2FqlkxfXtQT4hZg1%2BNIRY17Y3cqHBwNBTo93L3oWw9Z1JnNtVP9VubNaprQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cf7fc9356c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":108,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4ee89984d6fb4aad941e7cf6cc639d8b","sha1":"acba0d60920c61a2499c425d0fa8d6fcd06b53e1","sha256":"adc12bf71cfc37b9889de5d878c36ef74224dd986fcbec05656adb2d12016e22","sha512":"998b96b1f3fd723a177521a6a54616931aa2e0fce8dc23940f0fa573b14a711d210dc1dccc67e69db74abd89413badacfb21edfc081f3fbcb642c1a20ca98b9e","ssdeep":"","tlshash":"95b092885a6dc80033c0e08822856b04f304f1ce8ea7025e201701a88af0b268ae080e","first_seen":"2026-03-21T17:26:39.627607Z","last_seen":"2026-07-16T16:07:12.946919Z","times_seen":58,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FastTrackTracking-DmVUP1HR.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/FastTrackTracking-DmVUP1HR.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 624\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nRykqBYtKGMxxLQxIL%2FOiEJZ4fGc%2ByXMoL%2BjAPKOgKwEcYse21xPpL7KbuUXbMfxwghCFlVwHyU0FXSZi9i09yjT7VS%2BdIiKXhrIcS3VsGrK%2BCIcS5pG23RQKzkXOhmw8R4X1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d021d2056c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1386,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1384), with CRLF line terminators","md5":"56377ba0e97960fd1a4d140cb62f1185","sha1":"d67bbe6159a30c317109e9bdf7307f5e7578af85","sha256":"90d67f8259fc2e66a67ff2b4b6d3e3938d36818809dd64fbbe031d84fd5c82a2","sha512":"061c6a8987ce7544330fb0365c5820af1d11440bec1f1a7286e4e5071e8f9b506e0ea4cebe0133604241e01963f62744f1c2e841137f32054b60bdb6e101b55e","ssdeep":"","tlshash":"0921110f80f482f97c900e4e63e7e2a0957e6579702dd4a3f17a0bbc3b1c245939a897","first_seen":"2026-04-30T19:32:29.944889Z","last_seen":"2026-05-14T23:49:57.336012Z","times_seen":6,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FacebookTracking-DC8cwDZP.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/FacebookTracking-DC8cwDZP.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 373\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8Bscewk96Mcq02XupkviHoqdBoVOE5QsUckuyKd4yROg%2F%2B%2FiAnTnMgwBV3ETa0%2BMP7S%2BjuLMFmapzP943iMIRhCWmmSYp3uNu%2Fzl6T4jXC604aWPQn5aQxSSFMVVws0kwuT8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d021d2156c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":681,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (679), with CRLF line terminators","md5":"c89003002629a25a4ecefc681009a509","sha1":"ed04a148d338d35f5ae876b5d32d7adb480d277a","sha256":"decf3982610b7183ed6bf5e76823dbc0a10511d0660d674fb87e989d9e4735a0","sha512":"413e57983ccf4f6a10ef0dfbc3277b0c000a8aabc17bf41bb321c71bcf8f026f3f64d0c4ed9ff0149329a21ae8b708e1cc55fc5916364f068e8b1b257f41b87c","ssdeep":"","tlshash":"ee01fe0f2c85b47d167c18a8d3bbd81425ba590e2a8b54a5c6c7cdb9367458a40ceb8d","first_seen":"2026-04-30T19:32:29.825307Z","last_seen":"2026-05-14T23:49:57.41558Z","times_seen":6,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/DataspotTracking-BU1VqV1o.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/DataspotTracking-BU1VqV1o.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2593\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QRjqMNJ47XK2rSUAUGb9cfIPV3JwSmrWxxXHeW2NL%2Fz6aRjrgBwxd1tD%2F58jRZHnj8wgt8emSbcK%2BQSfWn%2B3onXPBTOYHvuKWeC5v%2FQuj8CFY%2B7Ru6qH5H0uBaidSI6yY73uKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d033d4556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8581,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8579), with CRLF line terminators","md5":"1537c784217bed55afd36ac3a9db03b7","sha1":"5a3dd0ba87b1e3f30b5a1e14ead051ecbf00a6f5","sha256":"73de071fc0b661ff772e9cb6dabfb0d70f4061a8675f9be5ab9c4c2f24997ed9","sha512":"0a4355904615992d840871bedf203e2d35d40fa4f6da19ec575b63001c1f42c1b8d206d28513943385140ac50f8b2b46d9fec9aac801a0bd1bd88d3b932e169b","ssdeep":"192:rjybYcB+h592WkO+bNKb0e35nBaCHJNvuvXvqvxgFzN3IYXge3AmYOchj:rjaYcB0kVKaCHJ5Q/0W1NpXge3gOchj","tlshash":"78020155641e78bd6037d6ad0d4722a208387041e1339de076aacf5a9e398c28bf73cb","first_seen":"2026-04-30T19:32:29.810585Z","last_seen":"2026-05-14T23:49:57.394133Z","times_seen":6,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/UnavailableMarketEvent-DRNaHNkz.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/UnavailableMarketEvent-DRNaHNkz.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 179\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7OyMhdErv2IR7bwvk7IAM03CKFJ%2F%2BOkTZwRMQdgcY4u00H%2Bq3CGk7xqwBNaTKAZZL4LpZb3J4yoZSPRMvoNGtK13RPH25G5RE2x%2Bfr7NRznB6TjF4M8Dxohu21R%2FSyeCkJ%2Fyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d043d6c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":309,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (307), with CRLF line terminators","md5":"cb2457d309aada0d78eff12d339e782c","sha1":"c58528547f1191917c5d6fb496c75f56a10dfcca","sha256":"9e251ffab01f3eba419fc34cf9dffbb417b4fc56651dd8d06b1adc5270c29645","sha512":"2871e687a6b1d44ed141f560cd410278e8fa6ed8badab7cb9c0919a0ad0892c3eb26f30d8818dc84694d3c7dc7b87ce78795ce6431f1f7d71ff5f24b27ce5cc3","ssdeep":"","tlshash":"ece07d0db044bffac0251cc8ce3d8b0d600307b8c7e945c391a920282b34235360ae9a","first_seen":"2026-04-30T19:32:29.782979Z","last_seen":"2026-05-14T23:49:57.395432Z","times_seen":6,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 628\r\ncf-ray: 9fa98d0a385a4c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfaRKjj98wG78-Q94g8ciN3whHfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1019+1 c=0+1 v=2025.6.1 l=628 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07a8ca43077147f4b93899efbe31ed8d","sha1":"bb87180866adc635991e4867c8222fc4387331ba","sha256":"b22b238c613c9bfcf13e8340213b734fea3bd0b9b2fe67648e3ba6decc104e89","sha512":"6d9a2235c65c224e78bd78025eacb630cca9bc9c4a838fd540de031cca2e8c442460eae186359cb98dcb1f1eb867414c6b5b77c78a2f3e1be6f6f36b254111c4","ssdeep":"","tlshash":"90f062be0d21c29ae04842881a0c6c5da472a9b9fb4424c4eaa5f7a67c0319433a54b0","first_seen":"2024-06-15T18:00:08Z","last_seen":"2026-08-12T02:21:48.822267Z","times_seen":2323,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/514.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/514.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1463\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Apr 2018 06:20:33 GMT\r\netag: \"df44034a6ccd31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gY%2B5O49kUX6pJmCXf0xXqzlpGiQsp%2FpkN6ByjjKz9VAYKOhmDO82dztkcT7ILPOupfD8hMIjluuHI665eB0ys%2B9AaI7VPWIjDZ%2FgTlE%2F%2FSV9%2BHLKVYcZBplIIVm40l6eh8MfGyV1TEugaEJPpw%3D%3D\"}]}\r\ncf-ray: 9fa98d0c9d6256c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"52af4f559e2fe7f78a6da0bb04e2c829","sha1":"fd4abf8bfc90aadcbf4dc4a2eef90ec05af23ff5","sha256":"59d6e4072d8fe12a0793b2dd584bc6528844c49ee28cd64421b5cd9411de62fa","sha512":"02b085a7d0b03a3d149f72155842ec380ec8a2e419d3aa243df010b28b97f6568d4aa11c2747766939d2022bce350a5486c1c35423632650211ad199e413cad9","ssdeep":"","tlshash":"5e31f763a4269d4ee0ff5a2a78da036023f92ddcc41220fa355b5063b07869c80c4662","first_seen":"2023-11-25T15:41:35Z","last_seen":"2026-05-23T17:36:46.291751Z","times_seen":175,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/164ad8f5eb7d9e506f4fb19575dabfc2_casinoGameIcon3.gif","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/164ad8f5eb7d9e506f4fb19575dabfc2_casinoGameIcon3.gif HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2448055\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Apr 2023 14:04:22 GMT\r\npriority: u=4,i=?0\r\netag: \"64380be6-255ab7\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=MTatZikfklD9K4qdBVBi1R4onvSMNRcuzNYprHBy6vo-1778590246.2079616-1.0.1.1-0t6TLEiLorhdIjQV_17oROfPO9ZvsQJJau_hf_dJkAcug4pdChwZ6IVEXTiRB37WnWz_YMiUHpYNpXA6LUTcdc2C5qsLy6R_uLOZX1qVd1cowfCVT7zIl1y7k77dOJT0; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z5%2Bgdvgde8BMxHBik%2FePAYh8xzPZcFsMHsaXb19%2BobAv07V%2B2lRvP%2FspFh%2BoD9dHl0bSQHinxzBp8wb34%2FwWF6zWQk7FIZLRMX06gayJLwNnIOi4epsRpQ7c4Nvhk9Bj5c5MEhN5JHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0ecbed76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2448055,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 440 x 310","md5":"84620e71035d1ac7a8b9a1f43bf60071","sha1":"047b4233e87e5cb2800e460e78c6e1662c970267","sha256":"e2ee766643a69bbb03ce8659171cbb6b7006b5a7dfd2d6a81c587d126a54ce55","sha512":"0f1a9c8402b8cbb386a1e92ffc41d0895029a317e18a0735cfc775fdf5a524db6dd461f7cca11bde5dc051941832d677ed2a73d8c977fe82b38451d59cf65074","ssdeep":"24576:yrzDgR6oyBYBNr8GcNBqYQMRyUhKa2ZCwmJ6TXu50YEE3rHBRlhN/:koQnBUxCbB3iCwm8Y+EjphN/","tlshash":"172533f44255d6e39af8f042f142259b204eed79c3a0b69b3f98d104dcecde9681af19","first_seen":"2025-12-24T22:39:16.299133Z","last_seen":"2026-07-06T22:32:46.905307Z","times_seen":31,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":381,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_2875b50a42a6d90f7e3dac265a8e7923.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_2875b50a42a6d90f7e3dac265a8e7923.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=wbplXKCj.s2r4bhs.1MDjZ2iCaFlh3N_S1orvmeSAJk-1778590244.372432-1.0.1.1-A8L6PIqIK3BrU9QaRFqdboScNCQr7kOoekOuOTi4huarw3ZIETfKFjPawhT0EWIZcJ8k7xqLYfDl88FbpQ3lynuCghjE67zgSj62GPuxy3rOjGB_qjAf_9SY1vXNvRxe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37930\r\nserver: cloudflare\r\nlast-modified: Mon, 11 May 2026 13:42:44 GMT\r\npriority: u=4,i=?0\r\netag: \"6a01dcd4-942a\"\r\nexpires: Tue, 19 May 2026 12:50:44 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CF8%2FIm57MK63ZjeUdjcunXJCK0%2BLXBI8JU31g9fe6%2BZvQdHMsa%2BWmgnau58H90wXx5h4AnVW6HWcryp80g40wznoLX6rganYdZIToIgPA0wSjG81NzHkybGRTLbI5BBVUse152NUoCs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d067fbd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37930,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"664e67e4e276e77687ee4d6ec980c73c","sha1":"8ed8ff0ec849019601cb22d3bd084262693ba387","sha256":"85d5eea63073581b8936aed1a3c791e285e352652aa2d476f060984c2d59a339","sha512":"f1905899e80522ce3a5154e6ed665839a36db148194a10b5cfce606dc85ca632570775ae79d3b6cec68234b39d0fe558fbf90233372a664968129805925001cb","ssdeep":"768:rmpGxdo90VKtFAdtRRBhYdYiUHcbj4Fag1Z45+USyLc:6+dW4KmtRlAYh8AFag1Z45+Uu","tlshash":"a203f181f4712eecdf931a34a2868192064c5df96d7e85f97785782bf08c69e013da74","first_seen":"2026-05-12T12:51:51.143431Z","last_seen":"2026-05-14T23:49:57.453318Z","times_seen":5,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/SmartMarketEvent-B7WtyuM0.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/SmartMarketEvent-B7WtyuM0.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/FeaturedGames-CW2_S--l.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 433\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iq1jdhHOdenm2SvTUaxWsJL918rZoR8uOb1MieuhQqsVUKXnF33ZoELYjaL3IEVirnQ9AQ1wg2UXtlitI0%2FMv2AJ3y%2FEns7XUBYD8Tl0i%2FShbxoZJjuVdGKecfA7039%2F4Up9cQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d06dd9956c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":916,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (914), with CRLF line terminators","md5":"1544063b17e5106b1e0a16a20a85d1cc","sha1":"e08ee3bb0960946747dd5d229b12c8293caa74e5","sha256":"26d31ddc1ab40706c1bc90bfecae76ed6eb187884bd15daca3f66b13a638b923","sha512":"5a7b32048ac5222429c116c489e1017a9acff2f43124e0ba6af58234cb241cb0b9abfa2dae74795820c64cfc52d59ba68c5443c45ba06120439824cc956d6423","ssdeep":"","tlshash":"0611efe6d480323e0672c8bdd1109b42419c13e7cb200269e98b86f573fe0fea34ee59","first_seen":"2026-04-30T19:32:29.816947Z","last_seen":"2026-05-14T23:49:57.485522Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.DoTVWiIk.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/6.DoTVWiIk.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEg1PYVnm2VGBsHfO2MUfHjujgAVP9vFGz-aAWEHbBJdJzDi2VJO2YcOTIv2ml4bscw\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\nx-goog-generation: 1778587684400626\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 5298\r\nx-goog-hash: crc32c=5HPR3Q==, md5=UWMdIzLh3yLYJXHH6UbgwA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 2153\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":5298,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5297)","md5":"51631d2332e1df22d82571c7e946e0c0","sha1":"17dc0cfb8cc2f12c0af7317249f76d7bd42a1d98","sha256":"0c00564efc472ac5256d4ecd6da6b6160b3e5caf3df20225417e0f3a55fbbfe6","sha512":"eadad76d853cc88d81c9172cb859270862192812b48731d6871fa3d2722e266936cfd9c40578f0cf2ec6bd4903b599597f7407e7d04e03e94b79d017e7b9eda5","ssdeep":"96:HHW1MDMDY5x1pnq9kuOxmPkkXFcQCux3MpfR9xllUSvnVDtPVWFt6ida+Kq92rSb:nW1MDMDY5x1pn/mPkkVcQCFNl+SdDtGr","tlshash":"52b164cd37c170b756b7a0e5087f9006722db5403cadd410c224f8e57e6aceaa1dbe2a","first_seen":"2026-04-09T11:23:51.371548Z","last_seen":"2026-06-16T08:53:49.903318Z","times_seen":5241,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 22:12:39 GMT","end":"Tue, 07 Jul 2026 23:11:19 GMT"},"fingerprint":{"sha1":"90:7E:2C:27:B0:AE:B2:70:1C:09:CA:A5:EB:B0:ED:3C:FB:33:60:E6","sha256":"D1:CE:FA:9D:79:3B:F6:79:1D:CD:A2:97:87:52:B4:4C:7F:63:B5:FB:4A:22:66:FE:29:5F:38:F5:74:60:9E:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86jr%2B7TzTbpXPBcZeqE7rpNOYAJ%2BMvlSqJnAIGb%2BsinygLVZoNqLPWdAIv4H7l4eilolT15zG%2BD7n5RXt85HC4XLYXDrVzgGMVHMvBLT2ajVhIF8F6G%2BBALXYKgafZ1SXAnhkIRyM5PD\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fa98d016e3b56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2821,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ed84599d293d187c97aa6f88754332ce","sha1":"f950f5294b5fa13bd1c3950e5cb28b1a2ee241fc","sha256":"599500c94c302ac02594dd87a6652eb51a9f45042f0fc5fc2bd2f3935f8fab81","sha512":"d94fbe4938b707b2595582d942cfd27ada4874b5be459851f77dc5371f705af81eada3ddc170697813c2657a8404f1303b8777279f716eef4ebe08fdce284cd7","ssdeep":"","tlshash":"71514f3646b21421436710683babf31ab23ad2433689e9447edd93005f85f68d9b3bde","first_seen":"2026-02-24T14:23:51.260409Z","last_seen":"2026-07-16T16:07:12.935859Z","times_seen":64,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":50,"dns":48,"connect":1,"send":0,"wait":245,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/fonts/default/Roboto-RegularItalic.woff2?v=505","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /fonts/default/Roboto-RegularItalic.woff2?v=505 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index.C0U6OaZb.css\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 09:03:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78564\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mNUxi8PW%2FeZTIYuaVOQx47%2BjgKI4KyMDou%2BS6gyHx23ODoYfUDRjUGxPXq4vYUB6NaPxtjTJmSJ3sEIGUYfXXS8lXwepL42C2P4Bh09nrxvly2wMVlUIHVvGXZu528dmkcrCEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d025d3f56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":78564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78564, version 1.0","md5":"ffa03f9099e16b1ed1a0158f01961b69","sha1":"f1b97110bb1dba1c8985b4c48fcc8f5c9cdb3e98","sha256":"84d373e980d8f7d376e80725c42737d1f76f34bdaff56575c866ffe61916263e","sha512":"e57c2b94d74e334cce5a9f880442efd3a3b90eb91b09b2384d3c2c109e087f51184a4a34d248ac980eee963d5dd4bf23f09d3032fa85310d925cbc2849d5199d","ssdeep":"1536:TzGsd78QYdAOQGSmGmOMz0En342rWzm4XAFVZ2lX8z31t6:TaQsAOjGmOw0EIq4iARqt6","tlshash":"f6731260bc8f5f5878b48e2c73ba52a89ff54c0824167356697ec6238f99344b24e74b","first_seen":"2026-04-10T06:10:39.548975Z","last_seen":"2026-08-11T20:15:29.063665Z","times_seen":374,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galabet1074.com/storage/medias/galabet10/media_751_e36e767f918c2e0b1323c581778f3e42.png","fqdn":"cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_e36e767f918c2e0b1323c581778f3e42.png HTTP/1.1\r\nHost: cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=qX.LimTLO.s3W_fndTwRDzqGGOIV8FrPAp2EILEHE98-1778590243-1.0.1.1-CqbXymCriyApEVq2_T8QmDKl.LlPHzsGV3wpiU7m_Pq1wCdiqMA_Z0.Gkrq4O38LI3E2YcspcW2j8wWY0DehHU7ENyCT4NNfLpyWi5hcqdU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 3162\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Oct 2023 06:12:46 GMT\r\npriority: u=4,i=?0\r\netag: \"652399de-c5a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=AJT.MM8zHJpF2CSppsfisbHs4plB7pWnDDtKmkwy6R4-1778590244.3720574-1.0.1.1-Rg8e1yuOkeXXlBS8PJ_lAHHalSOK_0UIOANPC6dnb6DXUG4wzkV7cyLIbdkrYbR6jRpGdIfAXKNYfw6xAmG9nUIPrmsOWWYwK33CSomZancPEjjN8.kKMC_kyugWI.LL; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHyt1C39VPIHKaDsGrTzFl%2F3yYT7Y5Fzx8lRWhT9LTdb%2ByPx0PzxBAnHxDPo0IXDnlO3kSROS27dVtpV9Cn%2FEjxTnp12L61rkDzOyBqSeZBj35HVN7sv0BjdDnOY2rvOcZ%2BwbUDz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d035dea120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"6b367a99bc86c352b5f45eb76ef837d4","sha1":"18d9b34beb5b22f7b086c4f803e6f21a95c3d22e","sha256":"e54c8f4ed20a3052a3d336f6084e083fb5c040aa67d85c170f0380ed0a74b75c","sha512":"c616fdbcf246d21c51373417c69af47c207bc8e6f36d4f3b3c53b83cbfe41bde4562cb147087264c68d1133c7378f477be104e8ab5c3927f7ca732981416c8ab","ssdeep":"","tlshash":"e8510af5f108241fc7a4c9721d59e0d3bd6af44e942d998f70a0d71e343b0a9d1c6966","first_seen":"2025-12-24T22:39:16.355284Z","last_seen":"2026-06-06T23:43:56.119039Z","times_seen":54,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/usePriceChange-PEKvXa4R.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/usePriceChange-PEKvXa4R.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:12:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 279\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UfIOIA6Mi8xw19ltXWlWtSUG26otG2SzWlxNBeUrSLNb5i5sLHoJFUo12vrA4vUufNuwQwx0ce3HmBmcYxc%2BRD3VAzLWLRdUQDSbsBMVioI%2F50UUnb9iLacpWk%2BFwL7hbNqyAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d043d6a56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":471,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (469), with CRLF line terminators","md5":"d8c5a11011941647d3e73d49e4d64112","sha1":"d040d45824943678aca554d0132429292e8c7932","sha256":"03fb9817aca8dd670b1976b0c8851f4501fac87fe577467b5f705b030c81898d","sha512":"68c4177ff04afd0fe18f174afee8b61211f92a3f2b7f0489be81e3c4232f56cd911301ad15d5d204c262e98cbb1b73aadde972ba2b8310158714088f5bdc1ae5","ssdeep":"","tlshash":"9ff027bd24901827545e0cc4c2a485571fd126e96bb9831ab230c82d36589ae06aee6a","first_seen":"2026-04-30T19:32:29.777225Z","last_seen":"2026-05-14T23:49:57.408477Z","times_seen":6,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1074.com/api/public/v1/tur/casino/partners/751/platforms/0/games?limit=12","fqdn":"go-cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /api/public/v1/tur/casino/partners/751/platforms/0/games?limit=12 HTTP/1.1\r\nHost: go-cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 1386\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=mOnfiHesubv.0xBWuh58XOcPtpX3Aaat7r7EgGmgorA-1778590244.614956-1.0.1.1-nJAgTKbgpkpOUd8YURj2Ka_oLcFGDYqaWF469ifueuZu.VxwlqM0uoJR2pQEt9EjiGEn2GLSiwizktYSYxoIWupzbfT_R3z1uEXFK4uUCP_XXo31iJWp_dV1yq2IeEfC; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=li%2FSTV97hluKNOjebdoy%2FD89PpuDuRBDrlmUGsvO%2B8UezH%2BVkOtsSSK8ZFd9jx43l884IOhnHju7f6B8AjnwxSg8gslx%2Fyths61jmtVmYg1fufptJJtaocLUeiKDth39vEl1T%2BaAZeky\"}]}\r\nserver: cloudflare\r\ncf-ray: 9fa98d04deb9b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6371,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cd965f3be28b512e69334fd67ebf8763","sha1":"cc61118c6146444459181400e04e75ebfdb5cb91","sha256":"a297d0c0318ddda3032efe2d379e32af9aae19724801a1b24041658abd26b69b","sha512":"3a58c921fd97bb89f44ca41612cb4e764c6aa46fb86ccfdb20e13f6d5589b9c01293ccc5201cedf9bd77cc3aee6376432400bfc93ca8374fec46fcce69f9f9c6","ssdeep":"192:E4Fvaq178jZcCAfmJCfCMfjPf7L1HkRkAnhg4FvOL5ohXrIhx:NxqNahhrf8fU2lm","tlshash":"06d1b15a4d28f7ebbb59098424533d0cd8be23c2a6cc7d60cd57d94a20e50e666326db","first_seen":"2026-05-12T12:51:51.149126Z","last_seen":"2026-05-12T17:10:48.691747Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12942,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12941,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/lodash-CcEN8nAa.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/lodash-CcEN8nAa.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:09:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 57815\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeF2oJetVIOKxb5BAUm8OiT1LuuU5MPhW%2BDgHR4UYMmLVDjZ79x%2FQan0iLol7ydaFi%2BXeAcSwUOv0YGtT5iJzC4%2FaXAQy6M9upKqOJXEMRCkhevZY%2FLylOCcsR80eHN7EZS5iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cf4ec7556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165266,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35298), with CRLF line terminators","md5":"52b187e263b833b9513f79f203644c0b","sha1":"75a03851a894e668e1f0b63d76c07a507d40fb88","sha256":"bc5d16a9abd16480d8b5dd2b6ce42ebdb7225a84d8a7a066f9e4190bd8bb9456","sha512":"bd37aa00b2b593be9cafea4269930d35ac3e1bb529cdee7f15a4aeecc6e76d80b9f84a319af2c2332f8b66b35ad8d2547b308a03e3a0476b71d330be327bc6fc","ssdeep":"3072:d/srcwn2yy41XoZhd76onMeMhc8Uyxu0GM7:d/srr2nZX/Aayx0y","tlshash":"a7f390c835d7f4a283a7287440bf084ff23dad65a84cc550e1aae0dd7db89198277e6d","first_seen":"2026-04-30T19:32:29.801198Z","last_seen":"2026-05-14T23:49:57.41118Z","times_seen":6,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/lodash-CcEN8nAa.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/lodash-CcEN8nAa.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:09:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 57815\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m97jDp0lSXmgCnPp%2F3u%2B0h6tMd8BlLtwBI49%2B7Pz47TCvfNLB%2B4VK0csfxQcSZu2wwWC2hFopVawz8GaJAvmbm0FCmB3m00YkM65Qe3qQgVWD2CzO9ZCqkRNa0Pbqbd%2F00dqZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cf71c8a56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":165266,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35298), with CRLF line terminators","md5":"52b187e263b833b9513f79f203644c0b","sha1":"75a03851a894e668e1f0b63d76c07a507d40fb88","sha256":"bc5d16a9abd16480d8b5dd2b6ce42ebdb7225a84d8a7a066f9e4190bd8bb9456","sha512":"bd37aa00b2b593be9cafea4269930d35ac3e1bb529cdee7f15a4aeecc6e76d80b9f84a319af2c2332f8b66b35ad8d2547b308a03e3a0476b71d330be327bc6fc","ssdeep":"3072:d/srcwn2yy41XoZhd76onMeMhc8Uyxu0GM7:d/srr2nZX/Aayx0y","tlshash":"a7f390c835d7f4a283a7287440bf084ff23dad65a84cc550e1aae0dd7db89198277e6d","first_seen":"2026-04-30T19:32:29.801198Z","last_seen":"2026-05-14T23:49:57.41118Z","times_seen":6,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.C9lBcIW0.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/2.C9lBcIW0.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEiqX1Cq08Aj4_AhaaWxbMAnfwnm4he-b7jPVuFjiWHRh2MsOoBnkyxaXCbEAoEJR_PO\r\nx-goog-generation: 1778587684458041\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 304115\r\nx-goog-hash: crc32c=84fYBg==, md5=VFU5kIKGma5dpQXNhKfFVQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\ncontent-length: 86195\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":304115,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65461), with no line terminators","md5":"54553990828699ae5da505cd84a7c555","sha1":"7fb756c0707893645717d5941f39b2efd8b0698b","sha256":"35fd889ec1d958bf5fd633f4dddf2b474ac46c5d5a820a3f9314fba91cc7cb19","sha512":"f0623c882d54352793fcfdf1866ce9c91e1770ac490d2aaada4722c12a5b81ab0659c2143182893e45c017da5d36d0433178a7461024f7a2fbe5857f71d18198","ssdeep":"6144:f338OEQ4KFjvqBOtt+ODfiYn/EoSU7kIS9uRIEer1F9gzBAFi/OiMwjLwUcxr12U:PNGeDKOtt+ODfB/EoSKkIS9uR7er1F9F","tlshash":"56544ce4b352ba3cd7e7c2d690ba2609f33c3d59b42a5764f1ad9c0d3395448833ab64","first_seen":"2026-05-12T12:09:28.883981Z","last_seen":"2026-05-13T08:36:34.825436Z","times_seen":69,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-B89tW-rE.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index-B89tW-rE.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/WagmiConf-DUgl5XWp.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5868\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkkV%2BPGc6af%2F3pzGVM%2FtsIPiaSd%2BIX7z1hXg05nbmYy6dk2sTG9G%2F6%2F7mZgXmBbNlzhGIgkuG8%2FlEClVk%2FrAdKz0Dy2CBVDZRb1hX%2BNPmCsD5TxEnIvSEOtr7DmG6bIlutgY1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cff1cdd56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18029,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17806), with CRLF line terminators","md5":"d8737e5bf55aa6a8c17fcf533dfb5d25","sha1":"858f882e4d881cdd16c127cde97f6a16d543a495","sha256":"1eea5c2f11d6c5223465074ca6ad2a8eda28f238e7798f99b895a73df1f21c2c","sha512":"d0f6897d3f18689e774de61646af49ce28d5631f3c4522588c0148e761d6a2a80863ab0297b26f0f18e0d9309300b3204008ab34485d1ede4cb0608cf1993e5b","ssdeep":"384:9Mci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJd:9Mci408FFnJrIjE3D/OY2E0xqpc1NKkC","tlshash":"0b8209d0e2b4f7a642e96acd80392074f2218c28347dd0f1b6b6edda70664ca956dd37","first_seen":"2026-04-30T19:32:29.771105Z","last_seen":"2026-05-14T23:49:57.370064Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/Odometer.Dtmtuu8d.css","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/Odometer.Dtmtuu8d.css HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/tr/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 09:10:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 379\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L39%2Bs5wRQMnw7P%2FAaQmLYKzBTNYTJipGdsuz6dUQUuktbsZj468Twk71d0%2FRgVHwMXGOpWJWsCF3A8SdMYw5g%2Bb9E5GSRz0UAjDqvuTfZIYQKdTzkqMZyhj4GyF2nBzyKGKUHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9fa98d03dd4e56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2759,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2757), with CRLF line terminators","md5":"7e0332c623c55aa42b82d979b278cf47","sha1":"d735be42f054c1506a27708cf43e57927d83d8b4","sha256":"788583d843a2066fba817d8c54c5224226c7c4cbc9d42d0602add2350093d19e","sha512":"d42ecc67b6836382f98fdb85abe09c385bfc0bc6a337f64261e83a9ff212073d2255365af92d66ab8fa2213afd38e611bd74f47a9592c152c8d42c2b64e113c9","ssdeep":"","tlshash":"4551e1154f910364633a7906b5c81b51bfece5415223c58e7329a447cf83db9e398e1b","first_seen":"2026-04-30T19:32:29.995482Z","last_seen":"2026-05-14T23:49:57.536499Z","times_seen":6,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fa98d05a8894c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446432,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fc87efe15da4c7a692127cd508a9c49d","sha1":"9ded6b37b89c8936417728aa860f0433c1fc0832","sha256":"4b3080f75903848cb9c36944f54d587881044516a23a69dbb717ff1b3138b3e8","sha512":"407b99a915e3e24d349196c11d9ff48d8df7702894ca855bb4e77201e589be7bdcafed4b020a9d066e00afca6d8f04117236c456de5ec0bfb0a3be724df19765","ssdeep":"3072:bnVMpaZB9ZbVbTZyYA5vrAdZ7GlAqRDl3g4WcmvuxlHkwQ7DWgk1:L+uBLVbgA4WHuxnQ21","tlshash":"279444bb8f848e5b1b280bc9212d3d6c99de298bcbc55df6f1c0cf1844f4ab92315566","first_seen":"2026-05-12T00:51:29.588024Z","last_seen":"2026-05-14T02:39:17.870953Z","times_seen":12,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":19,"dns":23,"connect":1,"send":0,"wait":227,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/emptyWinner-BYOhvUKK.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/emptyWinner-BYOhvUKK.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/CasinoTopWinnersWidget-Cp9RoxNY.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 904\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNVic%2FrY1gPRwDLlQpFVwTiomdylIbgzz1McXjs70aZjwrVEFxflYLx5CeWusn2N0cCX5G8aXF9O%2B5d7oSlMThOAUKffI5DACCvTRno6wM5JxTTfAgfWALkRLWrbgSbEg%2Fj0PA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d061d8456c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1788,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1786), with CRLF line terminators","md5":"6efb2e372d5a13e64629f80c57f5826c","sha1":"b84143adf54d4386728e648149f989c0e25800d4","sha256":"2dce6eba35c5f219b3f3c7beb37f5032b435206e8cfc18a3386e27a8ce497374","sha512":"cdf4615cbf0231fe4b77f8637b739071a8340b9e234fbe5e9f24f42e3f6dd281c4d1585e0c68241045204c7f4cf0f40690086418368311b9c5a1d693c4fb80e9","ssdeep":"","tlshash":"8531658fd5458a38b3674c9591d9e680cf142697ee34fae083e40e9ac5a5109c64c74d","first_seen":"2026-04-30T19:32:29.781449Z","last_seen":"2026-05-14T23:49:57.494198Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/useJackpot-3DH8fx3i.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/useJackpot-3DH8fx3i.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/JackpotPoolsWidgetContainer-BUz-kRPc.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 706\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dAT11qvy4gySUKZNSM5tEXa5ELgTi4mB4%2B94GxcNa3nNF%2BhhblcYSydFnYkpgYKSzLBPXNARGbRfo6ojuSiOUaWfNTNif%2FD%2B8DoBdI%2B8T0yWczPCno4qufyoJbsGoZu17i3UOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d062d8956c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1420,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1418), with CRLF line terminators","md5":"fe01604ee81ad32be66ed3de6f32759a","sha1":"b8b9a9e77351b5b822733bb6fdc5c725482b1f83","sha256":"bd350319d56a5d0935d6104ffacc8f42b9ba1e0c1b4870aa6c71b60129f8494f","sha512":"023ba555f3812668948d805c41b928f62dcda0f7326243aaf89d4122bc07651bad4b65cfe778c6aab5f543d3d4cdec1c7eee83ae19c6c0eb61c310dd988a507e","ssdeep":"","tlshash":"5621ce85c059e5f8f5cd8ca10167d72a1b383f797440a0a0a0be5ebda7a8d45b6a0f92","first_seen":"2026-04-30T19:32:29.86687Z","last_seen":"2026-05-14T23:49:57.34045Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/cdn-cgi/rum?","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 640\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":640,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":0,\"startTime\":1778590240782,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"cd932759-abe8-4feb-9bde-ae4a931cf758\",\"location\":\"https://m.galabetl075.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":34,\"domainLookupEnd\":66,\"connectStart\":66,\"connectEnd\":82,\"requestStart\":82,\"responseStart\":475,\"responseEnd\":475,\"domInteractive\":1009,\"domComplete\":2581,\"loadEventStart\":2581,\"loadEventEnd\":2582,\"transferSize\":6303,\"decodedBodySize\":15804},\"siteToken\":\"7d45e04a7e9a43cda84115ea76efac79\",\"st\":2}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HnBLJAR%2F4QMswdXOce%2BSMIYI3rNJ%2FSFoK0ajNVS%2BBhRemfjwjL8ZwgFuABt86rKIRq5NqDxLqejjErYyVwTcLhI%2Bu5Xi6CysHKkAU9ffjAbEZyW%2FxNS3R5mh5DEcwTQPzhhbRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9fa98cfd1cc656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-08-12T22:13:33.574127Z","times_seen":19417,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/DisabledMarketEvent-FWjdbj0n.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/DisabledMarketEvent-FWjdbj0n.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1256\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=slJkss1GgxN6EJRPIGJTzVY2sfpRyYmvBs5a%2FVA%2BFnc7WDidFQnVbeWqSM%2FFUlw1egvBYYd6WhMGOZ1SNt52POHHBZN9NMh76yZsnDKyJ%2BFMgxFNfpli4gemOmPwG%2B5MTgYo9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d043d6956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2718,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2716), with CRLF line terminators","md5":"2004c33aa5328e146ed737a41dd0257f","sha1":"082f0a2cdcfffbf505ece618d440d9585d0578cf","sha256":"23fe4259f06079b20d6ce27d573c0aa7e46c7d2b900cdc0e061d4a9745a0631a","sha512":"4c0607f58495b89c6f493e9593e35634f0d3f971adae574433a223d32ced36d778d45f9fc1d9cf7113eaada8aabebbe5f78ac5f0dfaaf25f1d98f9aaf35723ef","ssdeep":"","tlshash":"8a51866df290fa3d993600dcd27b1f1f201a17a2d6560592d0be8c29155c0dd366ffd9","first_seen":"2026-04-30T19:32:29.72443Z","last_seen":"2026-05-14T23:49:57.308507Z","times_seen":6,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1688\r\ncf-ray: 9fa98d0a489d4c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=690+4 c=0+4 v=2024.10.6 l=1688 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffc4df749e3b8f1d0890df22f4bc77","sha1":"ec3033a449dcff239808409c5d96d388a661ea37","sha256":"c7cc404018e711a83cdb04a08a5c5a12f54d1612b3d3cef12a0b7721fccd4465","sha512":"0ef53d6b15c58647ec9f81e562dbda560cd9f6287abf9d07b5e791db37b97879aa57c86637f7213ff127d4d10e4b8528ffc5368e085d8179d18524a4d506a649","ssdeep":"","tlshash":"cb311a52b99510c943825527eff4cd41971398270f3c61734161247349694b22df02d4","first_seen":"2025-01-28T05:59:32.01912Z","last_seen":"2026-06-06T21:30:11.571202Z","times_seen":1649,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_e17e2bd68c4902720215ccdc250ea7cf.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_e17e2bd68c4902720215ccdc250ea7cf.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30858\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:02:13 GMT\r\npriority: u=4,i=?0\r\netag: \"694014e5-788a\"\r\nexpires: Mon, 18 May 2026 20:22:07 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 59318\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BbZJDVbTmeqDpGrZTxOtfK6BOTigfpxI4%2B8SiYo0xlz%2FANvJo7OYYZysSDOYqnN%2FSQJbiS%2BfE473wmptqyyFq2aqjXE%2Fdu158vPPLPoJXoZLte3cEb2aoeVS%2BINjdDj5Oobx65CLnlI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0bfb1f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3a657bf250f0501b6684593c6d3449f","sha1":"3ae10ca24e1ed4fd7f3ee97a04029f84edb29c60","sha256":"4df91740f4d1d34398bcde4b0e71127587fe51241c3283f3e7a3bcffefdfc21e","sha512":"c70376beec80f90f2b6f42daa10038112bca9eb928f50f6dfbbb4b8e9054ecfde0afd7aba72fa826bd64ab0615dae03db9d608d7f63e06af394bcd5b669a2ec5","ssdeep":"768:X2NTeq/6/zzgNTdJxlOo7U+QcbTMcipzeGy3sB1I0:4Kq/6/0O0UOOzeKBS0","tlshash":"22d2e1a0782165c72e6e25483195487b904f5bec73687de5b9ac03b3ed0e2f24f69339","first_seen":"2025-12-24T22:39:16.142316Z","last_seen":"2026-07-06T22:32:46.686102Z","times_seen":63,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_9d7a3472a72a545588ee02e8633f0a2c.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_9d7a3472a72a545588ee02e8633f0a2c.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24730\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"694014ef-609a\"\r\nexpires: Mon, 18 May 2026 20:22:07 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 59318\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4WlmTPKO8CNCRgDASOJ%2FYXjprzBk52AgcbhbutvwM8HFhKU6e3ViYvQZzbJ4y22yiaYk%2BySE6Nz6dUXR5EsHqhHjVETlOOlyRZTn40rjoFIPv7erKGBCmFeXtuHw2nx1oMGD5KYGRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c0b2976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a684d3e1bc93c1bd3a25d9983b83c43","sha1":"716d0144a9feb5a701d5eb48133f155c97a47946","sha256":"8b8e3b62b691c235c3aa5aa0ca6bd0eaea4a188271006aa9b8fdff49c9a06f94","sha512":"b66cfd7a78af400a5375c747bd08f6d230798eca3fb7fb7e623a10694901475ffacc21eb5c6edadbecb1234bb751d2c62f06eadc0192731abcb5422d13d18980","ssdeep":"384:pFhktnLa9HrvO+y3t9oDMTjRsENmQFyUzDm8kNRfxv/xvr5c8JPH+UlX:etLaZ/sPj3NmQ7ToRfx3lr5c8JPH+WX","tlshash":"f1b2f1045efc293755f843d01dfcee680e5441af12980c20814e77f9faa9a3ba81ea5a","first_seen":"2025-12-24T22:39:16.21561Z","last_seen":"2026-07-06T22:32:47.05915Z","times_seen":64,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_4c091674cc1b8a757edda70f9a97662f.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_4c091674cc1b8a757edda70f9a97662f.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19028\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Oct 2024 12:45:14 GMT\r\npriority: u=4,i=?0\r\netag: \"66fbeeda-4a54\"\r\nexpires: Tue, 19 May 2026 12:50:45 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2q81dyUfpZfI0ihlIBK1TxZWTWiHPklgIu7o81lRlA%2BXGuHF09fMXwSZc4dPlgstwyPts8RDy0vpHQlpng7Wo7cQxdWvW1uYxO%2FfwQ5B%2FjRDZ5%2FwYT8Cz1sF03lq6G6pTRLGhrzJoBU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c2b8b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"470ce435d160ed8e1bb2c716c12f2bd4","sha1":"42647d800b75281936e1427193e663f6c6aea371","sha256":"adf12d4f2eef34d98c80198b305fc79522cef8ffe98b36263a852afe7c7d3a54","sha512":"03487ca714d93651cc162135dfc4558db1a3ed137e1386aebdf37fba4957861664f6461c2ee462ad22e21484e3e8d4c87286b1935b412972047668e6a063c396","ssdeep":"384:TTMuAQQFE/lQynoYVSZv8D9gHyuiL7vF11TN2pWeLTmSdF//xIjYhop1uCCKEhN4:8u5K2o0WHNiL7vF172pWATpdNxS5pxEc","tlshash":"d582d13a8138838b86d7388ad4dd1964ba674a4c6d2a3815d37c6f8fd8f114d137587d","first_seen":"2025-12-24T22:39:16.382831Z","last_seen":"2026-07-06T22:32:46.746165Z","times_seen":56,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/1/2014.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/1/2014.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1640\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Nov 2025 12:10:59 GMT\r\netag: \"764d8ee6060dc1:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ax9slJzkgAMkqKuV3cLS4fShtXtXGxAGyaX%2FPbCRlk8nhaLp%2B4CS5Xp%2B5qw%2BhaNMhS3KjOng%2BtDc88wfnboxpVKokaqynyjESVdgN8ni0OREZR%2F6ScJGS8GVuDMBRd%2FU%2BjdKhj7k8O6ng7mDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7e0f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"2445841d20c5fa1995c44901bede031c","sha1":"8878aeec550dd0f80fbe0e986a792917c94a43f9","sha256":"c0b40021d1a9af7f6c30801970e4b7a4bcd1e890b17384a6f8fd92ad5401de27","sha512":"f6f939ead02d7e4b4f18e2676f3bcbeff22aefa70be05113ec48ce941c47a6f0afff6d3649ee42026540fb0d84b88f4193b73dc792c0267589d2a75d55ee4483","ssdeep":"","tlshash":"e2310aa01b611c7cca635e43970f4e117dea15bfaa358274ba94ef5b457342a8c91383","first_seen":"2025-12-01T12:46:20.536603Z","last_seen":"2026-05-13T03:37:24.261056Z","times_seen":10,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/LiveChatAdviser-rT6Ygk8F.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/LiveChatAdviser-rT6Ygk8F.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 466\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxiNJfGdTtIoZNlU68ZrFdDsZ3tdcqRHpXq7BveARKfgcgBpsYcn6Sk35KO1KQkW7%2BQ%2F6xkfQxIwmPW4frOJPgFSRY4TcEo4Rav395tH6Ns809S%2FNcvxuuwQ2fADwUGhoNWFjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d020d1856c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":863,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (861), with CRLF line terminators","md5":"208aebdcf641f40656c79bda07555119","sha1":"25a44147189c2758e7b4d7124ceb2467cfbbe73c","sha256":"e19f201c0460845af755650687bf735ef7199f31390abd5407d4f775c73691ce","sha512":"05840875ed903788e2a5d971a57c9daed5c6df7abbc4e0d7b9f377158879adaaafa1cb103ce0daf27162f9ef42f66f3e96cfac78ab6e178c87a573318ba2661d","ssdeep":"","tlshash":"6b1123d5f0c6a3fd6667244cd75a604320064fb4c13d1db5407b15645a6ce0aa34eed4","first_seen":"2026-04-30T19:32:29.726808Z","last_seen":"2026-05-14T23:49:57.37238Z","times_seen":6,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/LiveChatInc-Cwww7iu6.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/LiveChatInc-Cwww7iu6.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1250\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DoU2OXDUaiX%2Fymonja0MbHj8h%2BP%2F1Y%2F9ncEG2KZV0XfaF9jPk3KQZV8LU8z5iggsoW3P79cpa399a5vksMLw1UeEDfi%2BZD%2BophatSMLaqnxPiyzOHuvLpuXkhlOBqMWgnbc3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d023d3b56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3156,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3154), with CRLF line terminators","md5":"a55cb0c72b55ee77b205907d26c6a209","sha1":"b64bcd8e422fdbf5c3a71d43f36ac655c3cf97fc","sha256":"c087e3b9f4493a6f8d40206452506dd1228437518dc65f906fe481abb27186dc","sha512":"4b1e74faabaa696e892c4110a1c36f7108da695e2cdbd13e0b9de8b1af5291caa0b89daa205e8ac0660d3d0c06545caf82a406cb0ba1282fb88ce4e3dfe6425d","ssdeep":"","tlshash":"0f5185ede07874b4a37927e6323b771f3215aa14a4484cf0367c4f166a4b58b8076e8a","first_seen":"2026-04-30T19:32:29.802432Z","last_seen":"2026-05-14T23:49:57.391145Z","times_seen":6,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/GameSuggestedEventsWidget-CXy_rPw2.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget-CXy_rPw2.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/DataspotTracking-BU1VqV1o.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1694\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kVt%2Bm2f%2B7kFhwbWaBpzlFezhTatCruVQrh4PqtLO5zh7xpTEG8cTnbH7amA55jJkCA3pGAXnbwA044q7z9lI%2FRgx3B2BN5PL%2FdTgfkyWx%2BJO9qt9USX6UD6MxbDtT%2Fk0Klktg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d052d7c56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3710,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3708), with CRLF line terminators","md5":"291b25d43c6fdaaeafdb4eaf2f21bb04","sha1":"5c67e6a42e2bcaf3c382c2563b452b061506185a","sha256":"8875b2abd4f21d5af947e12ef3c296a1455aa27d76706fc2b450479b254c9185","sha512":"a694796c3aff7e14959f2dbc3fad8e6973c2463e87554b8c9da3d0d7ee404e0621d56ed5a8bcd3c1c5598603bcae393ae3cf5fda5fa1c5e61de8658b3f3aa9ae","ssdeep":"","tlshash":"6071e856e010aa39917341d82bef321814363278b94393c1b63fca3133e51926b6a7df","first_seen":"2026-04-30T19:32:29.795963Z","last_seen":"2026-05-14T23:49:57.356203Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FeaturedGames-CW2_S--l.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/FeaturedGames-CW2_S--l.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3178\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OkSZ%2B%2Bh618BEsDSnLU7dBUXudoqFyjJpNLGTxKElXOfzhEzp4hD6fCnYniY0huTiOyFeKfUIz3RlNHAvPR94QfmWIHA83roxpb1maZKQNBOO1%2FU5DN9Ibgk4NSU3VeaR44sGog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d05cd7f56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7903,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7901), with CRLF line terminators","md5":"52f38a5e3b565c06662013c33693799f","sha1":"c67d070675a1f7246603573fe68c2988160a9cff","sha256":"782315ec21d9805b6885c5a27237564d32e43ab2574a2b0bb7a09b366ce03b15","sha512":"d89cbbd2c46eeb4a5922a91585b24bf1e03c0c6e2db05d6aab144b5a2e900d5d146f4304375c7e279ab844e3cee94abef33d5b500a5099ffb5b7abb458bb21e1","ssdeep":"192:RE/TM3f6HEEUD+Z9y7NaoihCWOJLwL4BflgayjP1:i7MyHE2ZA7NaDh6gaCt","tlshash":"e9f1e90ae010ba7de57b45eb757e6108f87a0ad0e7190890d07e6d2919e9246733ef8b","first_seen":"2026-04-30T19:32:29.941784Z","last_seen":"2026-05-14T23:49:57.397964Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/HorizontalNavigationListItem-DfugXUII.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/HorizontalNavigationListItem-DfugXUII.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/FeaturedGames-CW2_S--l.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 396\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OHK74m1uqCjf6FjhdraqYr0LQjlx65%2FdvLSeVHhi42TGNLA1q3KMX1Y9zI96LPVI3ZQd4qFEauFhtdk5DuO20S49KmFxWir9sGdXGz6JWFWqJvEFTFg8HYyy9iQRi5UzkgZ3ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d06dd9a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":836,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (834), with CRLF line terminators","md5":"164069264e8093d7a19d67cb5a5a212c","sha1":"3f248fbe0de759754440b66e33e5f4290c15e528","sha256":"3f7407225f44b01c700c3e98816c1b32428c7a846d39024a998685c5fe313015","sha512":"a15e65f66f8bc26b058052b81fdd752c5c444f033486815a7c1e78d9c0c870e708f386578ad8dc6ed500dfdb84816332904bf05ac621a9e0b9e7eb74f745c67c","ssdeep":"","tlshash":"1f01ce12f444dbbc9a2b48dc9b4e604672564affdf382ce1a0f4e0011a384467a47fcd","first_seen":"2026-04-30T19:32:29.873294Z","last_seen":"2026-05-14T23:49:57.349506Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1074.com/api/public/v1/tur/casino/partners/751/platforms/0/games/icons?ids=420030593,500009078,555579006,420031905,555573433,420033087,33012668,420031905,8500,3300892,3300947,420033087,420018885,420031905,420032616,210039,555576614,300000094,500043459,555559410","fqdn":"go-cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /api/public/v1/tur/casino/partners/751/platforms/0/games/icons?ids=420030593,500009078,555579006,420031905,555573433,420033087,33012668,420031905,8500,3300892,3300947,420033087,420018885,420031905,420032616,210039,555576614,300000094,500043459,555559410 HTTP/1.1\r\nHost: go-cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 873\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nset-cookie: __cf_bm=1veVI5CXwCjl99cE2S6TwBimllmE1aWG5PvHgZVQcs0-1778590245.5194805-1.0.1.1-.zVkcN9kw1CfLnFEj1xhOAgScK971Ii.wYYz1_vljsUIOMtaIyAPn4URqVOohAxtetTOcJouod_ae7Rt187P0IiZ0bTwuRLQVzor3yyeiH3ont8.ZJPEOGdo40r89blN; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tbC7nzvLmgWnP899hNZ%2B4F2P%2FYmScxf5zRNmH%2BKnyg0DvKAsPxyJkGy2IudugwfGhtWoTILpxCNSFgzxLZ8qvJZvA%2FVY7Av01bRUCeuZprqvn67C2T%2B%2FOpHOcO7brfPhUzZA2lPh4vnh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9fa98d0a7cfa569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3939,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"009143ce60c4a88a71bbb6378c32705e","sha1":"e388dcf07be10cd056be391c54ed2bec06300ebd","sha256":"168216c7e09de01f33342fb4b054b4d9dafa8aadaed3dbb144f6f6d56cbe3bc0","sha512":"20c703ae773bcbb65c03d7db0951e2f9f6d436d0474817cf68aece8eb7b39375367fa389272d5858a76b8c43cd14c3ca679518990e74d0ee5b4a6fd5c9e6236c","ssdeep":"","tlshash":"0b81b4271e18f7eb6b15594074277d4cdce76bc09a41bac00ea7b58f20e20e52a743eb","first_seen":"2026-05-12T12:51:51.17524Z","last_seen":"2026-05-12T12:51:51.17524Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/___vite-browser-external_commonjs-proxy-B9AoIgFt.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-B9AoIgFt.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/WagmiConf-DUgl5XWp.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:14 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sps%2B7gr%2FPDmc9z4gFbeWCpIB7XXY9oGVn%2BVpIR8V2akinaR3ZZ6laVFEUN46LuA96x1vbPsCQYOGW%2BKICga9fPvXpSWdzrhraijNQCmdZAsqbaY0N6ntUWy5RybcTpN%2BNmA%2FUA%3D%3D\"}]}\r\ncf-ray: 9fa98cff1cdc56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"fef88f6f37f64d0df82fb5a68cd0dcd6","sha1":"6eb3d8ae8ea34dd19374829cda9b4ae6aa4d442e","sha256":"5409b177a1223c505c46b6c633dc3834c50b2001e9e444d20f0779083c754c79","sha512":"8c08717a7134bb473cf26a6bb83dec4b50589eba04706c5bf1ac5c70a74733761d20ec107b38e864585b562a592f46f1b223b15540bb09b5f2444a7258095d2f","ssdeep":"","tlshash":"80c080495694dcf0528b1d828719d401d54c4d6db3f4f5f0bb4c9d5512025cb62b8f57","first_seen":"2026-04-30T19:32:29.761128Z","last_seen":"2026-05-14T23:49:57.432585Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FavoriteGamesButton-Bxkpo1Wf.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-Bxkpo1Wf.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 283\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwMAoB6wrySqoXdUztGVL%2BmC8sof0xA5Q8sh8jAM3uuXDZwq1GG5eDpAC72w2owvtuBN6UzO2BRz0HfP10utA0iWz3IdDzxf2m0at7VWuC%2FdgWmmtK8HJ2Dmoxs0dPVYOCxrHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d020d1656c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":428,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (426), with CRLF line terminators","md5":"4c47f765935dd4ca739421411271e4fd","sha1":"b934d39fd6712be2d9e472f64aa83567ab19b0aa","sha256":"d1277a6bb35298b776e3992e0aab5b30d954719f7b5625150f599409c29a56f1","sha512":"2d53a871ebb831aa5dce3fc74993af3f9541f0aa4cfe2fc3a570c975acbc6e9b9830ea35b840dbbd09d6d711f052d8bc145510a9fbf3e67b0bce27cc38769733","ssdeep":"","tlshash":"76e0a34ad088d2f927421a902607c0142826a47cd79cf49040ce18543d71457895e92f","first_seen":"2026-04-30T19:32:29.888178Z","last_seen":"2026-05-14T23:49:57.393406Z","times_seen":6,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/StatisticsOnHoverContainer-Du7jPvbE.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/StatisticsOnHoverContainer-Du7jPvbE.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 08:58:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2662\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qt1mRyU9lJe2LMXHV%2FZnH1hdUJC8nwpe6wwyPC6nNLa802wr9rT5uJZMq0HzaQ9DlPy4ZGw2u4lRFDwqeoKTrFULjsZNdiVoWuzWbSDMx0uC7sU%2FHS6tP30PsVgdqA%2FGNQL4dA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d022d2b56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9782,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (9539), with CRLF line terminators","md5":"34250df18a0a3bd2b86af389d5f611fa","sha1":"39b7147f17749173b39eb2c99bdad0057e34b8b2","sha256":"479eca31d4ee2296fbd02dca57f81efde5d4187349b07285f11b899b372c44c9","sha512":"e1c0872e49605b71c88fe49856101c1d18ff0cc4a9cc2fbd6c7171f9371b0a239c45a2e38cae0c17862a8f3c70a9465912caffbc1c168abeefde75235437f4f0","ssdeep":"192:FGn2zkXAsarXDxLwxGEE0D9AOgzmKj/e0o:oBParTxLwxGEphAdzmKj2d","tlshash":"a812526c158e5f69f41a8240b5202e35bb3a3877958d66f8bebc441fd3ce444bb9cb18","first_seen":"2026-04-30T19:32:29.945557Z","last_seen":"2026-05-14T23:49:57.518379Z","times_seen":6,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FavoriteGamesButton-Bxkpo1Wf.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-Bxkpo1Wf.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 283\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJBRE1fyL3Ra2khm441pOKbIKBkitXGjNhdrHDDXAhihtt21%2FB7CcHiM%2FKvwvVKO2317VW6wVoBa5R%2FpszepyJu62vZkG7qIFbaeGNv1NgPN60XEtIkbMCFUkRFWqOgPReYvkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d022d2f56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":428,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (426), with CRLF line terminators","md5":"4c47f765935dd4ca739421411271e4fd","sha1":"b934d39fd6712be2d9e472f64aa83567ab19b0aa","sha256":"d1277a6bb35298b776e3992e0aab5b30d954719f7b5625150f599409c29a56f1","sha512":"2d53a871ebb831aa5dce3fc74993af3f9541f0aa4cfe2fc3a570c975acbc6e9b9830ea35b840dbbd09d6d711f052d8bc145510a9fbf3e67b0bce27cc38769733","ssdeep":"","tlshash":"76e0a34ad088d2f927421a902607c0142826a47cd79cf49040ce18543d71457895e92f","first_seen":"2026-04-30T19:32:29.888178Z","last_seen":"2026-05-14T23:49:57.393406Z","times_seen":6,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/CasinoJackpot.LKSeTzHB.css","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/CasinoJackpot.LKSeTzHB.css HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/tr/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 09:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2327\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGxfDXhvnnGjorGVtZ%2B95F4jxHVLjPj4ldVNdinNZA5b8qjFdBg8tSuBFDkmTXGn05ixmcCBKXlAW42KnEKcbJnGufUEEnUW4ZiHR0x14ArC2%2Ftr8294ZuTw7fuXNbecnXpBrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9fa98d040d4f56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13991,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13989), with CRLF line terminators","md5":"611b672c6f08431f1bef4a9df92eb704","sha1":"b904b851093a554f561f2d1671fa4ca5148f6c46","sha256":"24abe5652733009a5d6ccb7060f97213b0bf1b92b622e4ca82f9fedfc779d142","sha512":"b0ca7f4ee6ba81bcb85a714eb2544ae681d5607c93b646c5187878aa70ad999cc1decf57718cca39a60f8320cc430a7029051d6ba198e729e057544fe2ed335d","ssdeep":"192:5aKQrrxX/YyrspdNl3qLq/1R9z7g6mbftDxzNfDFDfhf3fOfNf5flt/1ttTpFVFs:9UVwVELPhoEDaLDRiQi","tlshash":"a752dd07656f33b829ef653726f0f7cc9a3c4879c7126564a8d2a2194bcf9b006617ec","first_seen":"2026-04-30T19:32:29.985147Z","last_seen":"2026-05-14T23:49:57.454327Z","times_seen":6,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/CasinoTopWinnersWidget-Cp9RoxNY.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/CasinoTopWinnersWidget-Cp9RoxNY.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1100\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d7XWc%2Faf%2FpjeJ%2FLh8IFTDzpjTX%2FUmS7Oq3nXop83dJk6nB4k1BQfptDmIxfGtmJxYHZ5QpASdHmRMEjYGa%2BSY0Yy%2FDlQd8vmlcZNVZPr8IgSh0UhF76qyDJu72%2FY3Hk9AsOOYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d05cd8056c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2703,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2701), with CRLF line terminators","md5":"166aae5d1ca790b8f310208615145abb","sha1":"6553cd3b171ef01f7219cc0d588f6a1f6846632d","sha256":"66c8f1cc1c1fe8fea76681b1dd8bb37c19f79020757d42c33cb5d1a7c1f3c321","sha512":"3cffbd5e22de1e96ff4f373ea4696e38f9df74b92666ae3f7c3af51fa7449231719068e6341232f69a92c55105995728a7b7a2b4bcf34f1f5e42bf0aa4c3f406","ssdeep":"","tlshash":"4d514506d0049f7cc35b8dd67c654019aaa60aaad5306ee0f9bc1a118b741ceb59e7ce","first_seen":"2026-04-30T19:32:29.914354Z","last_seen":"2026-05-14T23:49:57.330382Z","times_seen":6,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 06:34:08 GMT","end":"Tue, 23 Jun 2026 07:34:07 GMT"},"fingerprint":{"sha1":"6A:FF:CB:88:7D:2C:21:DB:DF:9C:CE:23:37:4F:33:97:B2:66:83:F9","sha256":"D6:89:30:57:7F:09:DC:DF:2F:F6:56:BD:C5:FA:DD:99:4A:6D:A6:D6:C0:95:94:F2:71:EA:ED:8B:67:DB:6D:46"}}},"request":{"raw":"GET /loader/fasttrack-crm.js HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 14 Apr 2026 15:08:56 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6O.0HUoXLOwOEnwCtcVk0GNsJ3GjijfF\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DPKGSp5V4TRtfpCcqpBIT3Y5kg2z3h%2Bu2YQAFQ6S9HhPMOaovxxLo0grzB6JQkZgM7w9%2FR7ZU%2FVvCnYza6sPOhLsCPLCM5uG9x8C2Vuxbu1YCIZXHILOVklfrBnvHD0lext1GDuQ%2FnzVBUNcYy6vR7E%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8c3a87d110aff35fe17513b9a9ad30cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: E0oOj1-Y1VstTbOi0EsF18r4Dkaq8BUmy7PqNqXA_qRgCwZIJE8HEA==\r\nage: 1774\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"0a3e94e19b384b80fd4132b3735bfc8f\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d0808130b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6791,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0a3e94e19b384b80fd4132b3735bfc8f","sha1":"ec1475a09eda97a5622d7c5bc2d650c86314eb2b","sha256":"5c5fdf18e27f2ac8aa2ffbef0573c2280601802831df99d50ad86c51b57ef402","sha512":"84eefe0c0c2ac4755fbda71d622b0ee74447b5c1ffd35e740c1710d27b110167b2692ded7c311d5b8bef5360d24ad5f03382580eede0d9b6a58ef239b71fff2f","ssdeep":"192:/XKuPlMK5EbbbCWuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8n1xDt4atx5Ye4ymr//A","tlshash":"9ee10e5c39f394610a93351f033be115f3b6e533221eec41b9dc8968af54667caa7d88","first_seen":"2026-04-17T00:47:10.117791Z","last_seen":"2026-05-18T20:41:30.876213Z","times_seen":43,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":22,"connect":1,"send":0,"wait":20,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FavoriteGamesContent-CvJnpx-t.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-CvJnpx-t.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1197\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7PYczNj08kg7KutLfZauBRlsMf4UAWu9m3JytDxAZIC73EE%2FD8uahQzJ4vwQav5LEMuBDW%2FB%2BtMYFJI9ot3LQYlxv23hgUk8sW%2BcJZtH%2F2%2BE4nxh1xlBvWEBdxYiFS8KiCWevw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d082da956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2787,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1707), with CRLF line terminators","md5":"5df5255826aaca0674deeaa943c3d10e","sha1":"bf214f4f97aad9080d8f606a06a4367c4b1a9984","sha256":"e2a465139a450c2bff6ff7ef41d3ab40b31ea3f13231047f111d6b297057a7d6","sha512":"a3812bd97343f15e0cd9ed3340a0ad232ede1cc3f4f83d7d1980a9cda00345d45ed062875ae62cb21f4ed51e70118d16c3d9de1f9dad6846f3a7ac9e13ebb73b","ssdeep":"","tlshash":"d051831040445ff8ab9eade61f27c0540966038c6241c17e69795e3d3429a41723bffa","first_seen":"2026-04-30T19:32:29.757983Z","last_seen":"2026-05-14T23:49:57.34771Z","times_seen":6,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"eu-swarm-newm.galabet1074.com/","fqdn":"eu-swarm-newm.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-swarm-newm.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.galabetl075.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Lm/lz0jp22mN/zC/Xt3JYA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 12 May 2026 12:50:43 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Accept: htSvD8zocIn1+ty4JJDH/xbs3hY=\r\nSec-Websocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\nVia: 1.1 google\r\nUpgrade: websocket\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cf_bm=qX.LimTLO.s3W_fndTwRDzqGGOIV8FrPAp2EILEHE98-1778590243-1.0.1.1-CqbXymCriyApEVq2_T8QmDKl.LlPHzsGV3wpiU7m_Pq1wCdiqMA_Z0.Gkrq4O38LI3E2YcspcW2j8wWY0DehHU7ENyCT4NNfLpyWi5hcqdU; path=/; expires=Tue, 12-May-26 13:20:43 GMT; domain=.galabet1074.com; HttpOnly; Secure; SameSite=None\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jXItidTzKeQU7Na5SrqgtDjcoInSXh26dMywXfxrv48DgIcPnyH3yj5SXQMCNscsvIIvQZMq1bdu6nhhtnCHjy0o%2BUPzMzV%2FfG9CuaQXYGG4YzzzRwZ6v3krOlA9HvB2Tw%2FEHD7CnXIhvwwEm0J%2Byg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9fa98cfcc81a712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=530\u0026min_rtt=478\u0026rtt_var=182\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3126\u0026recv_bytes=1173\u0026delivery_rate=6652373\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=f7fec25ffef9744d\u0026ts=194\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":26,"connect":26,"send":0,"wait":178,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/JackpotMania.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/JackpotMania.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=461YT3fRn_8iKaDiTS8XicpRN4UCHRMVlD3QFD7ewe8-1778590244.1431084-1.0.1.1-s0zMuCCgrxV4W5PSaTdFgw9ppsGLhxXS5AiRk.WB7pN8sXshh3WgXT_FHuqtkGKZjvBzG851S8ewfhY_F4pQNXKlRtnI_LWUig5V3o.HUJq0idi.P1RNQmarIvFkKT1q; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQYr%2FRcV54iSUk6gaFlZMpMA4cm4WZ2WKkGFZZAsQhJsw7%2Bi66TpR2GBbB%2FjZGK%2BPj3Z6XR667XciXBK4O2qHzo2V1XkE4YtLkFwaQbkKcsZnlGTwICMwU6rNYT0wVuUQgBNbqWriR0%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686270a2-1796\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01eb10b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6038,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"829680ca0f2f9d1f5faae192e8e40d75","sha1":"cb4c7ee7795a21eddbe36de36ff6c2e16e5f87cc","sha256":"05bca82b332ce5b8d3ab2c1e26331babd5f33d3ba924bf3e2b63b7fe44f8ed79","sha512":"173fad7120aeaf6cb2f7fb730a95b9af4587cb8804d09fd8a506e5eda8eeaa02d828a05e4c4e34bcc56f542e68abe6443792c891cfc8f2eebea59e21388b7a90","ssdeep":"96:NqjNrGLUu6fBaLQk9p0ZG7mi47U8/UA+5pRxq8uK/DUUt2TEojLdK7HiBe4I4erG:YprGYdqQkQE7mAQUv5p3q+DUU0Xqio3a","tlshash":"aec145fafb75a0f96ec753cadf223e3d79495d3d9e618794512e9a8907439c803018d0","first_seen":"2025-10-24T05:32:28.41634Z","last_seen":"2026-08-03T05:58:17.611717Z","times_seen":67,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":36,"connect":4,"send":0,"wait":83,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/LiveChatAdviser-rT6Ygk8F.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/LiveChatAdviser-rT6Ygk8F.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 466\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2Boiss0z%2Br8EqtPZ%2FfGoVCu5yzblh%2BmmC2JcnAl0XCH2jmzw%2BSxYK5fo6OG77h%2FzkMS%2F20qQSxRqcpg3ZwwbYwiXnXKQNiC1%2FVV%2BFUEkunjdOvnI9mcsFK7eHtcldrJ0G9cNTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d022d3156c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":863,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (861), with CRLF line terminators","md5":"208aebdcf641f40656c79bda07555119","sha1":"25a44147189c2758e7b4d7124ceb2467cfbbe73c","sha256":"e19f201c0460845af755650687bf735ef7199f31390abd5407d4f775c73691ce","sha512":"05840875ed903788e2a5d971a57c9daed5c6df7abbc4e0d7b9f377158879adaaafa1cb103ce0daf27162f9ef42f66f3e96cfac78ab6e178c87a573318ba2661d","ssdeep":"","tlshash":"6b1123d5f0c6a3fd6667244cd75a604320064fb4c13d1db5407b15645a6ce0aa34eed4","first_seen":"2026-04-30T19:32:29.726808Z","last_seen":"2026-05-14T23:49:57.37238Z","times_seen":6,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FeaturedGames-CW2_S--l.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/FeaturedGames-CW2_S--l.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3178\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qOFKDY2VxQlV9JX5ZZQJosbozWB0b%2FS%2FeV9p39jToyBUdnjYyCFMHKrnKE1yB0Sx3zMGNlnysNXxpshQlKyV15XyeG68utuEP9lvbvdqstXTBixCGZVIDWHu9ZqCjlXKu7n1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d043d6356c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7903,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7901), with CRLF line terminators","md5":"52f38a5e3b565c06662013c33693799f","sha1":"c67d070675a1f7246603573fe68c2988160a9cff","sha256":"782315ec21d9805b6885c5a27237564d32e43ab2574a2b0bb7a09b366ce03b15","sha512":"d89cbbd2c46eeb4a5922a91585b24bf1e03c0c6e2db05d6aab144b5a2e900d5d146f4304375c7e279ab844e3cee94abef33d5b500a5099ffb5b7abb458bb21e1","ssdeep":"192:RE/TM3f6HEEUD+Z9y7NaoihCWOJLwL4BflgayjP1:i7MyHE2ZA7NaDh6gaCt","tlshash":"e9f1e90ae010ba7de57b45eb757e6108f87a0ad0e7190890d07e6d2919e9246733ef8b","first_seen":"2026-04-30T19:32:29.941784Z","last_seen":"2026-05-14T23:49:57.397964Z","times_seen":6,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2444\r\ncf-ray: 9fa98d0a38614c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEskOIKWizVhJrvVnrMlrV9p-fmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=19+0 c=6+17 v=2023.9.8 l=2444\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b44902a539b26f42ca501a8fc2eca9a","sha1":"c9156f826c8af47c13c4e95a4953987d2c34a74f","sha256":"e1473cf463a4e737486548692bef2ff33e1435ccb7b1d4d9e4428371b57a2666","sha512":"2dd9d9716c420f8d993a738149c8ed8a18bb8ee2034cadb05c3743cbab9ecb9eaabfa064be34e53fad571e80eeebdf7292cb9811a369dd67d51da327fd80fef2","ssdeep":"","tlshash":"db513db78f5778c0ec5c0e4b60017a48e401be0053f0e18caab51dd2069c629d371a8b","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-06-06T21:30:11.65097Z","times_seen":1640,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/games.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/games.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=wC41l996burKmv2oMvh8kdR0fhClJSmKbXGjo_2Fj3w-1778590244.135347-1.0.1.1-ERRO.qYXGNPtzais2.h7J7zf7vtljlIBgsk2QnurkpwA5PN3swCnFFtNljZEQ_sZNsdU.Ej4OtbMWjzZci12IpM_ABkMw3WQ55Z4_3Sbv1eUya21wMpoxzxjXW_HpdtC; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e6Zz1Xb6GzpoERx5OnRfNuh7P6je%2Bd%2BCb58bgoVA0%2FEw6cxXATXjJZy%2F%2BcnUi17vfOO2bWL9zdYXAq0i4esotR4oyDJ67COv7LjnbnhSxTFnvj5A%2FgOzUmBuMafiCL%2BLNSUqKJb5cio%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"6862707f-525\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01dafdb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1124c704ce353b78a51dd2190edbf761","sha1":"969751af8092f4dfa4450def11dc616eff99a8e4","sha256":"02b58d0aaacddd78f61fcc4a92e72d8526294443ec8e695fe41a763a24d873b7","sha512":"62371f1a27dc5a9f43dc9d738c81641e16ad577f02a50973cd1515f41053160ac5286128dc60ba13ce57271eb462d1f258f830125048ecaad0944f9f5153e39c","ssdeep":"","tlshash":"fe21e14c573150fcfd4fb3e9a32e6b787449f2156823c878c05e45cc268aa4b64dc861","first_seen":"2025-08-01T03:40:47.562391Z","last_seen":"2026-08-09T00:35:02.17114Z","times_seen":1088,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/CasinoJackpotPools-oN0RIPj0.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/CasinoJackpotPools-oN0RIPj0.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 509\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FeHTPFhlMPeHLzu5BG2vufGoOs3Jia4UMl74VXKiRS5O3ez0pFU5OGgRkfpxDLfB6%2Bqei9GWKOxI7lgrBwFu988tdqOL0VtB0L2aHB1kjKn64cxxNKtAqG%2B79I8NA5wUV9NyuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d042d5d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":941,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (939), with CRLF line terminators","md5":"cf1cd20992193f4d7c1d2769bdebe157","sha1":"9f0328ed65111fe9ccd1e0730fd650d1b08e9026","sha256":"eb42d74aaf4732529c41541a793c5d7c0a8fbf4e207e6d230e2f4285391f6ea4","sha512":"98bceae736ac34380ddcdf2e6638efc8ebb08baef5d46db29a0b6323da354255fc92e7e8fbf808f21f46739de5136a80791b4e67974b703742c9e8215524a589","ssdeep":"","tlshash":"3f110e8bf02ae2f8d5dc08e080a4925b073e2f38f65042c0009c1a2d96b280af679b81","first_seen":"2026-04-30T19:32:29.798296Z","last_seen":"2026-05-14T23:49:57.448384Z","times_seen":6,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/PromotedProductsWidget-BmBBmXho.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-BmBBmXho.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1026\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iK1IxWcIKyD9ZZpupa%2F%2FdhJ08K2zxKyLUNaoPY7fpwSC27Bwu90k%2BYcIrNdJlQJZ1lbXrRTKUzCAFhe%2BwkaKFChBCHe0aGYVb7AOXy2z1wmp%2FXlwfjWicBJXq%2B7CzSWwRhttxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d043d6256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2121,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2119), with CRLF line terminators","md5":"f9f8074e3a11cfd1c273f1b563199dc5","sha1":"6076d56c138570583511c7d77e131c36e35d85f3","sha256":"a259e43e1bb8a25a400220ec4f08441a32da2569a1666ebc27f57bd5f5902e21","sha512":"e6634febe1e2a8907f916fe4757b2c103b6c30c63ba387041fb9be3923e412bc632c20a426d80912815c67f077b21d1a9af6c7d6c3a89a9a1208c168878e1626","ssdeep":"","tlshash":"2c4169c3d934a279f23e5cec114550c838257d18d96558b150b77c1a913d816bb57ffc","first_seen":"2026-04-30T19:32:29.921789Z","last_seen":"2026-05-14T23:49:57.407266Z","times_seen":6,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org/sealassets/c295be2f4e8be3f4221686b0b5849b7c-galabet.winwingames.io-486c6ced63392226b7bb98bcb3a47c5e200f727c81d94d94704379de531211a4683f102c172d4031615d4a731a036011-c2VhbC5wbmc%3D?status=valid","fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-05-12T12:50:45.857Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /sealassets/c295be2f4e8be3f4221686b0b5849b7c-galabet.winwingames.io-486c6ced63392226b7bb98bcb3a47c5e200f727c81d94d94704379de531211a4683f102c172d4031615d4a731a036011-c2VhbC5wbmc%3D?status=valid HTTP/1.1\r\nHost: 02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":135,"connect":9,"send":0,"wait":0,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_1da498fdc42586f4951ac17d7f37ac22.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_1da498fdc42586f4951ac17d7f37ac22.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33990\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Dec 2025 11:17:11 GMT\r\npriority: u=4,i=?0\r\netag: \"69429137-84c6\"\r\nexpires: Mon, 18 May 2026 20:22:07 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 59318\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZPGA9lorM6sYHLzAVTztPX8F7c6Vbs%2F57yi0MnaKqVrsuWW9VAf%2FCvdDoxklnS8%2BubqhVXpmauOGiaJJfxURLPyWv5SvVaGuhqz4DOT%2Fk%2BZo1ch%2F3OBs6pLXmkv%2Ffl3LsLdvgS63Is4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c0b3976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33990,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d56d2398c08343d9952cf54a2a7c677b","sha1":"3a413ecdabafa2928ebb8d3fba0e1c35c7fd0999","sha256":"99567ef402f8006b0b83959ff9d76e89b907d548a51d771d04c5570b431b11b0","sha512":"fc03c48b3202a3e3f975a49f54bf2b05a3a19895581812a1fa51e20b4af4aecf0840a04041ab8ca1c065098e9c9552e7fcb5e76da460662b6c5c726028d70fea","ssdeep":"768:LihWEwcrCPjUS9evbbemPNwF0O+gnVgaDwz0aix8jktQWF881Z:mhWEwcrCcPRPNwF0OfVDDwz0atj2Q0Z","tlshash":"fce2f157951b4f7b58588cf2aa088a813d0986d03ca19beadf18ac3ff21e577f309464","first_seen":"2025-12-24T22:39:16.197206Z","last_seen":"2026-07-06T22:32:46.872797Z","times_seen":28,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/firebase-messaging-sw.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:41.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /firebase-messaging-sw.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:02:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 511\r\ndate: Tue, 12 May 2026 12:50:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vysoxXCz%2BMnCiM%2FAdtNkB3AHPDt1b2ea%2F%2FElIFTaNMhKENn%2BQAzX6sMgLT%2BnJloQF9GzEchykCzFqlW6%2FX3D3lCuDia%2FzBBKgxKTTrsMRo5tMwUU%2BJtuFrbqmQWZMdRXUpzrjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cf0cc2c56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1153,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7726d28a1fb7d022808d139d825a5f6d","sha1":"fd02b1ebf730b59a36ecbd4c04a403f15a44bbde","sha256":"768cc283ea5534f36611004306c3ad6a98a049fdd416a216daa304041e73fa9b","sha512":"a3107c2a5cfff5017290a5f6d9888f628d7389d3e5b561afac5ec26bcf704edf46ccd74418c2299bc6216f0e939b5a97b8e46cae62d70c0be2f2e258c820562f","ssdeep":"","tlshash":"3221fb134be2f8232e3001c37b9a3218ae2a0e3903b0e0df70bb56b0271556b205bfc5","first_seen":"2026-04-30T19:32:29.88642Z","last_seen":"2026-05-14T23:49:57.350968Z","times_seen":6,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/withPanelButton-aAeMPmmR.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/withPanelButton-aAeMPmmR.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:12:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 515\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CLc9ihCd04t7T6vwy60Y4pfyYoqUONYlIZXgoWNTVeb68GslWoCjDcj8ZEDE%2FOQYia6b84LuYi96%2BGpEc4IFuT6kOCAtJjHMe%2FBO1RKZ350g5Hr3vf4fmYtz9txF1%2F7BwlyhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d020d1556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1090,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1088), with CRLF line terminators","md5":"135099bfdf29dcef1a4ad144e2519eb9","sha1":"340b47f364c6fbbc8187cca7d8fb55c78ad89d63","sha256":"2104817f5665831b4156571e8b53e0dd675b5cb9df5af83c7aeaa11b993733e0","sha512":"3933bab1aafd06a0d1f0dcab3897db9bd30c652b9c35c87f7c2f562562c3dcaabf4f4c95b64a76f8df589fbd6cf87d284225c94cf2884368fa0b5d0faa8fa789","ssdeep":"","tlshash":"9211f0e4f5c4adb1e0c40188577b2cb6719a32d9dce1149021b6c8da5fa90489a5e9ae","first_seen":"2026-04-30T19:32:29.865626Z","last_seen":"2026-05-14T23:49:57.443303Z","times_seen":6,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/GoogleTagManagerTracking-DZhctjBO.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/GoogleTagManagerTracking-DZhctjBO.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4845\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2dHXchUEH8GTSvrhC2XVXCuR8Vh3RuqVpFUtWLOZJplLfQDuGY5NBX8YOVFGsR4gAckg5vHPf3EE4VktvuXFHl8XmUd3B3fH8wNerDrb8VugRx6JJMPYS%2B3Ii%2BYZEK7K4wMcrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d023d3956c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21780,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20471), with CRLF line terminators","md5":"a9ed68d341df84dc333867860592c7bd","sha1":"8d63b948bc8f948e11a6b3830bc574591c1ad756","sha256":"32658a08b026183b6b6f8a0258c12a7cbe735372fda058bf0af2bcd53295bac3","sha512":"5926e946eef0649e707db5a9752541656915c6a73dac8be19defdfb51eafd187322daa782739d257bb3b94ed7de100d7ca607ae4c9d638e55ca186834a8151e0","ssdeep":"384:B30HgCB901PDVPAZ9e5mze5giWVyoxJUJF+FOndK3pqyuQNJg1F0TQOmhNwizwTO:d0AaqtAZ9eo6SiWVyov8MFOndKqyuQNC","tlshash":"00a2bac7f9a548a0b5bd1fe81fc2528635b1b65af49144707c9e7c0c223cc4ef2b5aa9","first_seen":"2026-04-30T19:32:29.854425Z","last_seen":"2026-05-14T23:49:57.363459Z","times_seen":6,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galabet1074.com/storage/medias/galabet10/media_751_d9ae3c894307358d99e0d666e91a8018.png","fqdn":"cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_d9ae3c894307358d99e0d666e91a8018.png HTTP/1.1\r\nHost: cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=qX.LimTLO.s3W_fndTwRDzqGGOIV8FrPAp2EILEHE98-1778590243-1.0.1.1-CqbXymCriyApEVq2_T8QmDKl.LlPHzsGV3wpiU7m_Pq1wCdiqMA_Z0.Gkrq4O38LI3E2YcspcW2j8wWY0DehHU7ENyCT4NNfLpyWi5hcqdU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 3192\r\nserver: cloudflare\r\nlast-modified: Wed, 23 Aug 2023 05:40:31 GMT\r\npriority: u=4,i=?0\r\netag: \"64e59bcf-c78\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=V_.EkggCvwq6Rv9FXoumwxwAGhPLqfL2VGye4T.j7ek-1778590244.3717394-1.0.1.1-QJ6fJmixCGy76tI4sofkXySHef1PW7DiNsgUKYUIvXjuMCBsz0BV8KgyUOZf37VMCes1UYdq_CPv7YfvyIzLxWUCAL1suskG_4lCHBitls_vhsrCAGD8aynrzbRXgRnE; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20zo3p7qjON%2B1JRWAza0hgUa8KgTZq3twroz1RcTE79OGR3FgVSGit%2B7F%2FMrABOwwTOW3V2J11ekwSnJYUbOQTIMIJhMtxH42sBJK%2Fez2AYroh4lJIskaxJit4QUtAhEAsWsjOrr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d035de7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3192,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7abcec36faa73c3c894b361fd966fcf6","sha1":"46f3c98f019e59da6263dc8278edd18eeb5e36eb","sha256":"1084b9e09a8774b738e99814bf9869be91b3c154d88bde64c9eac5e399153b19","sha512":"bbe0c85875f870eafc2ecc05b3c21d5a8c0022f1fe92224e65d3fb3f11d68f5793947b810d00c612361e96bd113a510f2329aab9437de415f5be3e1551800cb0","ssdeep":"","tlshash":"ca616df43548b234e081f076129690e50436be4e219eee17b597737cbf2515cd0c7149","first_seen":"2025-12-24T22:39:16.116509Z","last_seen":"2026-06-06T23:43:56.103943Z","times_seen":54,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/RunningLine-D8CK8pTY.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/RunningLine-D8CK8pTY.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 567\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qv7UC79NJKkxmikg02wq2jCqw5aIvDgG3CoykGLO%2F9ZCQftRRZyfYdWJhTvGSwbO0UAVrC3KDA2cxi7iCEUPo0w9qUVd9V%2BnWLdNA8UqQ4hrfubst7QiNwg8mD0Zr9wAtJbJzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d043d6056c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":995,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (993), with CRLF line terminators","md5":"051be86df563ede1d9b91f31b051189c","sha1":"5c86b79f8073b46282b39979eccd91ad87c76368","sha256":"a655ba06b8ae1af66260af28e440311c4bc59fcc746c0966d702a80ac83d0abf","sha512":"5c9f5c6648cce9b9ff82f4f0d59f33eee62bac2a25140ae0410e8b519410d83f06ef121d9a4411c923906c00ef6b0a26c0d5062c91d00b8ddbc4881efbfa9c4b","ssdeep":"","tlshash":"571102569011b5fccaab06c2b13e040c295701a5fe274da0e07e18552a29180bf37fb8","first_seen":"2026-04-30T19:32:29.751652Z","last_seen":"2026-05-14T23:49:57.478899Z","times_seen":6,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_c372c2b09b76d984de01cd2413db3fa9.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_c372c2b09b76d984de01cd2413db3fa9.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25320\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:02:58 GMT\r\npriority: u=4,i=?0\r\netag: \"69401512-62e8\"\r\nexpires: Mon, 18 May 2026 20:22:07 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 59318\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8yN1h20rJGz9w2%2Bx7M%2FmlqrQ7nbxa6kZWdtvMy4eLk%2BZxmAJpE2mwOFwgPYghfeRxAHUTs20Uw5tPqY%2Bt%2F3LE4QvBqPUb0xMqyuxr8ExgZef5vBB4JmCECrDdnGF06vPT%2By0z%2FbTvk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c2b7a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25320,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"acc869e91de526af3cc37efa5e7cd714","sha1":"96a65c3c5c64e544be0a75f42e7578147811db69","sha256":"57b2bd8ba04c5fc5617770502b74fbcbe449dbb22377f04e8042147dcc5da51b","sha512":"d35b2e9c750078007a66162e0b7956edb0b85f33f4e5fdaa25c83b7a4bbbb8e7540ff6eaa60d012ba904f0254bf0d35ac531b422eaa44763a785f64f01442722","ssdeep":"384:2AJyeaoQmlt01QNg7DPEqZK5Ud6nw4Gw+Ma8iASXoK41z+I/gYbz0n89B/EV:ZyeaoQmlS1BL6uwLHSYK41+Hc0nce","tlshash":"82b2f1b0154ab6d3708548666c0d3e9017ce8f5034ae0bf4789020229765f5fe4cfb9a","first_seen":"2025-12-24T22:39:16.063814Z","last_seen":"2026-07-06T22:32:46.641113Z","times_seen":64,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/1/2054.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/1/2054.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1184\r\nserver: cloudflare\r\nlast-modified: Mon, 14 May 2018 09:47:43 GMT\r\netag: \"c74dcb9a68ebd31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLCJXKm0YBGBeIvfBpGbtSYRYgdc28jKozeUvK6ZyvhQ%2Bo68Sp81JhvHLnUY3fEPp5l0JUl6owgM8SrXUxdfICSVqzunWo0%2FC1iT9jRpmpZT6%2FTX8ytK08F%2ByD8sWU2d69tQ7%2BuStEY7K1T%2BDQ%3D%3D\"}]}\r\ncf-ray: 9fa98d0c9d6a56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1184,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"508a25185058b156ef83e739a9e4e008","sha1":"31b2fc815b07948d252cd863f1757f96f9509ca6","sha256":"93df47a72307175dd560ad3ee25209d33c4dd5e53d0951413d972e0cbcffa429","sha512":"7c20681e02e83696222c410feb6036f2697dfc68956d8327fbb9c151a53655b1d98ebb845a9c306cf5212bf603e234c6a3dca9703570c3b91b50a59a40d8da8d","ssdeep":"","tlshash":"f821aaec1a5f196843795796ed833c81f0c761b8af0512db6fe947e2693d84cce50d22","first_seen":"2025-10-20T07:10:30.822473Z","last_seen":"2026-05-12T17:10:48.714859Z","times_seen":13,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/logo.png?v=1773142319","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /logo.png?v=1773142319 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 02 May 2026 11:51:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11207\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vOjH7S0FKEuGDwcSe%2BvScu1FbwBD1h78LVIB4Hj5ooMnhAtZJV1JmPGvFd3tA5Bv12YWV0mjtYk17UNOUf6zdsrbUrfRv84y0V9vKuCi3vDzwkdaqjWu0IUOKxQX5LkCLkypg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d012d0556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 120, 8-bit/color RGBA, non-interlaced","md5":"07435eae1f792873123ceaf56d03e8b4","sha1":"2d5bff4e74f8f098fe27f5d0883b4b767c57cf3f","sha256":"db6d4b5791fea04470cd762db779a812e6341957340b2a3a3e0832040b504d29","sha512":"32311cb25314e3a8c54bc7a486b5e20326c096413244025d5419ab254913ec4d085cac09dbf3c34939676903823dd30bee4a1ca1cb7f3d82d9215053357e7696","ssdeep":"192:ymSi6Gmmerb/9e0bjuq8eiaRTUaTjJJCVogmgjV3a8i0NCmN:yJi6GmVViZliUIyV4gR3aoN","tlshash":"8332c06b08f495d1b0046f56c266bc795590ee663038eb119cac0c77c42bff63797e68","first_seen":"2026-04-21T12:24:49.04731Z","last_seen":"2026-07-16T16:07:13.026054Z","times_seen":15,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/FootballCupWorld.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/FootballCupWorld.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:13:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Xu91mXIrBdu5Gi6uvMo.8V0lyJGvDKmXk92gmXsRL1Y-1778590244.1324456-1.0.1.1-goPqt00QQe6PY95.vLoLZiyg0Y6_kedIp2KSYb_JEtn7aAX3FSHmRT0K.mY589UuRryU47.jFl9htDJHvbw0uIlFcVjdrQxyafsfU1LJyZGUF9bhyorfNQPHbqR1OV8j; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oraVvjBaa4ZvuYBC3ZkiN%2Fyz604HDV68%2FskyiZbhMk1%2BEhVGP9Nclg8prxJY3aTXcBLEPxSD3CAG1GJ1sPHTajZ6pSH9%2FwvpRucTtYwbAxHSTkuh3%2BS0TgS6QaRq7qaOOgAiZ3z6mRI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627140-b92\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01caf1b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2962,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e6cf1dec89d8443b90fe366c18e79359","sha1":"4cb45ce53ae9792cf8047fbba2bf92472b2912bd","sha256":"991aefa0576970b3e2536f461b85985bdaad430b714d69830405a954ffcd8f37","sha512":"06a89c6113378ea10d0b45056d1d0f7e21e2ac7520313da526d1bc9e94ca48f7ece8467b8ea2d8b9df5058661760117440a7968856931631f7d19842e952fc8a","ssdeep":"","tlshash":"2d5195d9fff4e2b4a9c50b7ef330595c344a687a7b225958e23c8d8c67d3d8d4a00845","first_seen":"2025-07-08T10:50:27.80435Z","last_seen":"2026-08-09T00:47:56.477174Z","times_seen":316,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/userJWE-pM_Mqpsg.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/userJWE-pM_Mqpsg.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:12:02 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=28VUn6zI3bQjNHC7O8%2FUifz0qDDy1TIgzp3VgqJZ41R1t3zzLvRjiUCf6konGCWX%2BS9gh9Sc5YQQWjp9KmRBPQ0evL6lPDyWwvoD2rSc0zHXNwV7a96c8sH8wCEJrG%2F2%2FUi5XA%3D%3D\"}]}\r\ncf-ray: 9fa98d021d2256c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":194,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"501b70cc98d6582f6ae0940f4a6eb51d","sha1":"32f51eccc56adffed968cec4c0568752278df6d8","sha256":"90322e1022e6e8339782be885cfdd6e8c38b995c2e9c33e3610c59301351e982","sha512":"ed1eee1b87da5696c41f127f2997600c4b8e86fc1f9864a0c1a4322eb732ef186bf8aea19ad4dcc1fe69d7bbd65a2d9d4cef5fb9f65c23fed35cb2e0ef7ba683","ssdeep":"","tlshash":"4bc022eb0cc411bb85582c401049ec128220392862e8d3415b08d3aaba6600bb20ca14","first_seen":"2026-04-30T19:32:29.88265Z","last_seen":"2026-05-14T23:49:57.461024Z","times_seen":6,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1074.com/api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\ncontent-length: 674\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ALK7MImtZk60.VGqT7TwvGpEXxxRqSN56av.jX8B6uk-1778590244.6145856-1.0.1.1-HeeJtuQ0NGMtcE.beOVnczVSWbHuFuQf9.NcEK_KUV1FpsFeQo_yVsKhTSCyp2pXGLYcgYK.uocQxhpf4CJN5aYFfx7Sv.oq_H6rwAYQjP.Dxr9mkDO0_7sEPWNxDPAg; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9N0VhXwtok3RhnlNDppgpy6ZBhGrbVzcUBxddI5Mk5vF6uezgkHawPcEflmBL4Gxubz%2BqNVr58Gye3WvsD%2FXP35SZ1Xxd3ggpdrCX%2FrBtGTP2NzKjOIoeTf1gvu4geLrUm99LZS9iO2u\"}]}\r\nserver: cloudflare\r\ncf-ray: 9fa98d04deb8b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e3b4ca7da1db28f5adf89558d0c53727","sha1":"a728d245f216c742bcd5807306637797ed2b81e2","sha256":"8d364fd9d995bd916470970c47199538ff33dafc649dd2aa82b8c3358a9544df","sha512":"77257c8ed57be00badfaeba4907ca8523a4a1da3822d19a9776dc11fbf00248a0e288e9db0655e0700c39db9c10d0bbf650cc3a460473973b04e4a3ecae06a47","ssdeep":"","tlshash":"6441cc13b02d986a5b657b40a4c3394a88ed58079c0e8570cd898f8d86ee72dc6d33d7","first_seen":"2026-05-12T12:51:51.208844Z","last_seen":"2026-05-12T17:10:48.483779Z","times_seen":4,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/4b264f82dff0a2449eff3dd18895eac9_casinoGameIcon3.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/4b264f82dff0a2449eff3dd18895eac9_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28746\r\nserver: cloudflare\r\nlast-modified: Fri, 24 May 2024 12:55:27 GMT\r\npriority: u=4,i=?0\r\netag: \"66508e3f-704a\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=N2gCUBIfZHc11MaH8R78yrYH.yY7Lmm19qu_kB_SGf0-1778590246.2065446-1.0.1.1-1gizBy_5QUTgo1rc3n5mQVhKHdtWWj8X.I4L3Eb4lLZ9XU.jG4PC2Hx2GdcUteN0u5Rdib4YM4e1r4a0MG9jtUmQAqPBEFl9oPQxVoEm9vsOwDTqhhOjs7wYn8SrT3MQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KKWcTe2cZqrozRERtLsS4aMQ5amDRKN%2BW0V6eG0Rcahu4t6%2B7LQtZ%2BoI0u3gCm2BIFh5v6s%2F4D9o46YsaRB7sYtE138JIk8I37EV3%2B8hc3VG8Hpfg%2FuTJPOulefD%2FO%2BcdBQUjxfiTs8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0ecbe076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":28746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d625311757b22ef12d6f6c9baca4c599","sha1":"178252135a6968c4e9a5149b06503c365d09ca08","sha256":"563d7d2acf42d671c309e9a9d4a438505bdb43f531e5d38181664221a084fee2","sha512":"a02af144c06face2d13ff6dd319a08c3eb11ee2e08cbb0ac5000c8179fd13d797dde66ba07363af6f80f782dfbf9b2eb47fa0f050f436bf7f6d3624ef2a5d490","ssdeep":"768:VyZjkTYIqhDWIuiIAgz8LKpeq1O6I18QKd4fiyuxgomGK:Vy9kUDDWPiIB8LKplBIGQKd4faWomp","tlshash":"01d2e193df9e064ed93f8f4339ac6bda72a63a648105b3658c1d9701fd7beb406c0909","first_seen":"2026-02-24T14:23:51.406196Z","last_seen":"2026-06-06T23:43:56.07954Z","times_seen":27,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_eb6eb5d96a6681e53fdeea162c68d705.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:50.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_eb6eb5d96a6681e53fdeea162c68d705.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=WCbyG3ZRWcjrhuKhjQ2eUJwYDC5kwndgGguoMdEjavE-1778590246-1.0.1.1-bMESR3a_Ez_sHzoJsuvJUZo6rRkqZ5nGJcxUda0Sdrv4z_8ZbPd0KT_ajSA5RwE1n53vJRMs4kOs7Wf5tSm5vrYihQCnWSo0cd4Wj3BNNXA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 149624\r\nserver: cloudflare\r\nlast-modified: Tue, 12 May 2026 11:21:20 GMT\r\npriority: u=4,i=?0\r\netag: \"6a030d30-24878\"\r\nexpires: Tue, 19 May 2026 12:50:50 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=sKrHhLHxbCwG0dsK4nLA88r6FHdhyFoVUCojb7Y8ikU-1778590250.2254179-1.0.1.1-g6U2bxkkmqyMj32lRbnI37iOpxN.CwYp1Q8c.Z7nxt8onAqywSwaS.SQP.Zg8oioRYb_lw4szTcZzeSt4Gdwy7ZXJtuNgqZQQ5_0m7gclsV9QIZuZoslsQAXhRgmFByW; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q4egoTsWUkqpbJHde%2FTgRUiOZIs1Ry9a4wEdmq%2BBUO2cG3V%2FCFQ7hqslYSEK%2BZ6Eo8xCkH5a3vb30QbWjF%2BkZ1rRk0bIPv7R46TuQLen0UD2d8pbHrvJUxBnp9pw2D71luayhL0uF44%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d27e8dd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":149624,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d5298c7026c3227a16942a6cb6bf0b38","sha1":"6a993a622dbf0211bcbd941a48a59305b3c60d78","sha256":"df45c7154bf22264ba8a7437382e4fe9a34a3106d757939d635c1997918ca8a4","sha512":"b2920c3f47c5aa473bb7935dc084bb2934305dd8e8c98eac0fa2890bfdbeead957386d27c80ba858c1a3b1ab2a8e0b9adf2e478f1f5ff7fbd5cd55c57866fa6c","ssdeep":"3072:/9wILLcf7KjGDAjqxutJUo28p+3fsQeayntQEngG34TsXBOu/5Wps9sU:/NvczKjGDOJn28YsBrxB/5W+9V","tlshash":"3be313d22270b2d4d655eba3d7581c1dcdc4b37c20d6ac49b4887b8593fe14643bac6e","first_seen":"2026-05-12T12:51:51.212419Z","last_seen":"2026-05-12T17:10:48.468474Z","times_seen":4,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/fonts/rubik/Rubik-Regular.woff2?v=505","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:41.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /fonts/rubik/Rubik-Regular.woff2?v=505 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index.C0U6OaZb.css\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:40 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 09:03:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 65016\r\ndate: Tue, 12 May 2026 12:50:41 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7P1VcKnVaYeik0ybl252PJ699fiegt41uK%2BOontuibUc121RNN6pEnHnupScSvS8%2B3rkxBRcvAHiOFIzuMRwe%2BH4P%2FaM6KQoQkDFNv0Crj38yRd4og4jQmA612rbucMUrbJKUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cf34c4c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":65016,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65016, version 1.0","md5":"8337ad8d3b81dfebdda8672beb48193a","sha1":"e4c2689401e0b7a102a7e7d2de80ef4d00113ebf","sha256":"5a1334fe02cae3435260fb5a1cec196d3d6727943cf3e8d41404f996bb3654d7","sha512":"e2a2cc53ba800532793a338f0b1ab6fb335a4f7797fad5c70ea41ddfbb87289f631998e4c539c097f9d45b08228dc5692386d4ed1fee5d7fc27c96c2acfa051c","ssdeep":"1536:fcgmTURFnEYA8sMb4NUfaJOpe2G62dP2ZTCKWCz:fcgmTUzEQfCkpZ2sZ2Kbz","tlshash":"13530212124e446cb0a8d1f2fa73b5b3a46fd92f4677986c7a4e75046ee08531c82edb","first_seen":"2025-11-27T17:13:28.640443Z","last_seen":"2026-08-12T20:46:59.259913Z","times_seen":487,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":84,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/menus/footer_menu_751_tur.json","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /menus/footer_menu_751_tur.json HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 1137\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NVNLDNyS9dDBBOaOqHI7iG2QesB2nILt56D0QaloQ6gCb1aCHmvQojq2fd%2FLltI5WI9pZfT0XPNOIJ5v18bDM6ixmXW0aaNlJ%2FlVNP9F0Lxo6AFt8%2FrMBkTZI1RT3%2Fz0MmzDgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cffbcea56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8560,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cb7c741a547fc4a891e36f03de2f52fb","sha1":"e589086845b554f59b1b11b2b498edd0f09d2c50","sha256":"e1f2743754b756e617ee3307f8ac72f50f94263f3009f9aa90aec03edac6be73","sha512":"2d3da210a4cece77d8c2c5a21e57119c60f5010e02e3e86a8e7d3b1df68174b55f59be99ed140bf5760974abf623b8eaa24d96f0808498dffaae7723bf944482","ssdeep":"192:XSk0zkRSkukOkWkEkRSk36kphkpGkTSkEAkMlkk73kKUkwHknu4kQSkvIkWbkCOY:XvTNrLz5Rvn8xTvewIYfQQvVdqO3y/XV","tlshash":"c7024612f00d5576e7087e00bcc7ad0b84ce609dac5d49519d4d8bcecbda5af8ac62eb","first_seen":"2025-12-24T22:39:16.150949Z","last_seen":"2026-05-14T23:49:57.318125Z","times_seen":57,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/504.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/504.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1562\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Apr 2016 13:06:07 GMT\r\netag: \"f2ced46659bd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0fXCaQH%2BvZy0t3JtqxOW5jqz5n%2BUY%2F1vDJaKu7BxTW%2BZMNqb39xxxs3whEq%2BOBJyjsSa1Dx8cYqALu2z7pjywPEAu9gqmlICbbV32F9gMQw%2BwrRnChbH%2FSfjNOJpq%2FNEv9BfE7tHszM5ENOPJw%3D%3D\"}]}\r\ncf-ray: 9fa98d0c9d6056c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"dfcd90af71fc2da34203093d7d764f50","sha1":"bce6aa5309527a7150c421d2804d38486da7aec5","sha256":"21726b907751ad03d75b234b5cde839ebe664b5564f05550eeb0bbe1d3936cef","sha512":"cb07be17207863c78c366a7e2c38f81d6d04f185cec91db875806f28ae62fd60eba2bd005cf0615f6ff825b5fee4bea10989de9a3adb0a6619f142813fbfd8c2","ssdeep":"","tlshash":"3b31e7df2b1090ea779512e2fb3ae4b5956a73344c510e8e6f28a65aacd3934c0c4961","first_seen":"2023-11-25T15:41:35Z","last_seen":"2026-07-29T11:35:55.861266Z","times_seen":164,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/516.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/516.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 1472\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 06:57:35 GMT\r\netag: \"8617722f256dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 11 Jun 2026 12:50:46 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4X7g%2Bm%2Fy5GkAwDKKitzTx97zApsvRxM8%2FmPwPgGmCwh8bMlf1NZcUDvtW%2Fp5ZFKcBPvr7onFeN8mZL0ENt8yuERrDdxv5AgEScGmd8irtBpnfMFde8ez613HHIaH3NrQvNgccUFFCONbiuLHsg%3D%3D\"}]}\r\ncf-ray: 9fa98d0d2df456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"89b635b0ed7cec4e1e12b16f04656cda","sha1":"fcc530c57d81c1bbf38e109bb2cfbce7aeb3c5f5","sha256":"f48ecac68e3a75583c6e33b1c21465f522e65955e020bfc5512c6a2ba29abff9","sha512":"a9894fb07e11707ee91f6e4b91b5c7a2bb172bd14f10839341974221898ee061e09f1a62fce7d025d5243165619faa7f10b2cdb6069b55a4e2c3e93707994345","ssdeep":"","tlshash":"0e31c97e6958defc32dd20610e1a2e34a16903495760761a3ed1e21c923e6d444d1764","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-08-08T13:53:53.948439Z","times_seen":417,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/f91d86159a6fa2646fc05faf85444deb_casinoGameIcon3.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/f91d86159a6fa2646fc05faf85444deb_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26144\r\nserver: cloudflare\r\nlast-modified: Wed, 09 Mar 2022 10:12:27 GMT\r\npriority: u=4,i=?0\r\netag: \"62287d8b-6620\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=46TnOjiN9yR8TlhUd6wkhS1ZUqs8DdMhIIeXIoY4O3s-1778590246.2120724-1.0.1.1-CYvM1_XEiA3.hYEACeSiiqSTJDiBDFFfYUQ33exE8B88OffJk4D3TULVm6lyzt0OyhIdA9E4W504xDhuqfT93sSt.US94Esj__RUuWpCmvFlZFDmpU81vGjc9eKBoGnM; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdqEQLit6UUaAH2AquMgp3J%2FtMPYCoXbGiKiWcpkaBcCLN%2Bv%2BDegFOLfghlWtajibrQ4TEUfxyQi2vEmW69SweutsXhqAjZnDF%2F433%2BWs8oxwUuGw7ZkhNXuJC4POu6%2BUeFhGV8ELTk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0edc0e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":26144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"42f44269d232d70fded0fcd6eec625b6","sha1":"0451d047118dfc0efc3e47c1ce7c9d1d59592567","sha256":"2528b23d041640335417b996ef47c4d70d31963a8f46c669c9a043494e6e496e","sha512":"4d1c119faf6ade091e77081bdcd999ad5b21014b45ead34f1998f2f89ad68851a00aefe6d92f3ca635624b2c23a8de004d31de9691d35073738a8a985bcac0fb","ssdeep":"768:KWrZGU/dYsw/vf03ak00hw1ao0AWwahEZMQR:7x1Ysw/EKkEaohW1hEmQR","tlshash":"00c2e1c0cbadad045a37b0a7744572a168cf91e387de99630c45bccbe79157823d9b32","first_seen":"2025-11-03T04:12:48.546868Z","last_seen":"2026-08-04T17:53:28.758481Z","times_seen":5,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/HorizontalNavigationListItem-DfugXUII.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/HorizontalNavigationListItem-DfugXUII.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 396\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yjbwODfGeWDqT4wlm5K8I6Nui31Ab4Ff1GpX6Dvc73nkl7dI2hFTSIes2YIoRHdaOMs2TXa7QVaJVm4LlEa5vWRXNlyoChKMW%2F1I5B2hku9R3%2F8Oj0cEcKk0EadLdGsZCYOMuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d043d6756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":836,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (834), with CRLF line terminators","md5":"164069264e8093d7a19d67cb5a5a212c","sha1":"3f248fbe0de759754440b66e33e5f4290c15e528","sha256":"3f7407225f44b01c700c3e98816c1b32428c7a846d39024a998685c5fe313015","sha512":"a15e65f66f8bc26b058052b81fdd752c5c444f033486815a7c1e78d9c0c870e708f386578ad8dc6ed500dfdb84816332904bf05ac621a9e0b9e7eb74f745c67c","ssdeep":"","tlshash":"1f01ce12f444dbbc9a2b48dc9b4e604672564affdf382ce1a0f4e0011a384467a47fcd","first_seen":"2026-04-30T19:32:29.873294Z","last_seen":"2026-05-14T23:49:57.349506Z","times_seen":6,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/getLiveGameAdditionalInfo-1e_kccjA.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/getLiveGameAdditionalInfo-1e_kccjA.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/FeaturedGames-CW2_S--l.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 557\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8kaq1iOZCjSw4Gg7wwooPRaVmLVEfRjtMBWosfGRAZAU%2FCkbmw5n15kqT%2F0q3n5owkimHTBCBkCLN0vcCzDOEjgvLiTYMRBHbk2t4cKCm2dDEdAaiseM2SyEmSIBtl8c0SGZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d06dd9656c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1151,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1148), with CRLF line terminators","md5":"82f139f8c40ab08eac77e7b49301341c","sha1":"8d1f84bc72c0d8e92b2b2d670856cfc262672552","sha256":"56e77d237a0ae4d5b2966631ce43e483ddbe65136a99fc43757bc9301009a738","sha512":"13836810b57c9f0b29882c3ad111bf1208ca2a27deb5690f7981379b05abeafa9a4d8b2b6a989289ac33c1b2d2e19dfd2097a66261d675d95e38912f9071f2c3","ssdeep":"","tlshash":"632144b270ae92bfe5c94c9457b01b31a2b1ba09380445ccbb3cc91928774c4a7e2039","first_seen":"2026-04-30T19:32:29.789826Z","last_seen":"2026-05-14T23:49:57.396307Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/1/2659.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/1/2659.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1627\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jun 2023 13:14:11 GMT\r\netag: \"1986bc254abd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wTM277223UwrFoo9Yalz3xD1gcfr5r26PAZfd9v0%2B8CwtuBq1mWdinp6lfYP5l2tDDcPHpFOYry0xs1XCLCPY3n5JcUI1UJNzoJwG6j%2FjLTGQI5LsKFqSSUhebl8CCNvxG12XPI%2FnjfoW45WNQ%3D%3D\"}]}\r\ncf-ray: 9fa98d0c9d6456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8da8407f3b3ff2d6862b7507f4756292","sha1":"1219a96d05b20705a695f6a6ed14cd183c8b2887","sha256":"0619228d38660ad844bc103f7365929c2407ccbec264b834bab935fec6b72806","sha512":"a27ed4eaf35e4ebf22cdc44081c79022934206fc70ea9e41149d3a139e2b964994ac4ecab07032e609a695ae46f06bd550b963a160ec2aeccb4c732e9bf4f867","ssdeep":"","tlshash":"3831e8d72ee4326aa4152556a4e3c0e2470297fe3e161a93ca38d6af95ee204009018c","first_seen":"2024-05-03T07:44:22Z","last_seen":"2026-07-25T02:18:47.305179Z","times_seen":108,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/497.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/497.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1602\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Apr 2024 07:05:04 GMT\r\netag: \"225e0e6de96da1:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kowy%2BwenGpIyj9eWPz4KwJR2JRKlSokuQWUr983S3yvl07eWf0ox6m0UbDqd%2BfLxV5a%2FpLm%2BYXaaLR5uQ3VYCKUDVK%2FNBOKnUuQ4RbX3gD0cnDxcqr1ZmKb4OFTw36bNStjnZ4JIho6LZuHpZQ%3D%3D\"}]}\r\ncf-ray: 9fa98d0c9d6756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ad9ce33648f5ee729704f974697dde27","sha1":"f35c4de130e98caa3644519973c3acb3a999717a","sha256":"1b7e2c9b977b4a9f9eba5173d04ac3bf7f02e1255755faadf8d4b34cee74cba9","sha512":"25e91633e20cd97e8a468310801d1d3681fd35ade9ed2ae16186ac23b520c9f2bceae06ed2ba4c72facac0f36253a6a8ba2e2cc66bacda61cf0abc3980462b1e","ssdeep":"","tlshash":"3b313a03f704f09ca520381ab2d2f93046040a7a96db6f873efcc43c08f10588a83d99","first_seen":"2024-05-03T07:44:22Z","last_seen":"2026-07-31T05:52:37.533896Z","times_seen":434,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"216.58.201.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:47.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"GET /gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:47 GMT\r\nexpires: Tue, 12 May 2026 12:50:47 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 12 May 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 133775\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":418018,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33240)","md5":"da09de73cf14062966b62f0166ea81b7","sha1":"ba6cc5c4381be10c9e373850ea951931615e912a","sha256":"9de1e0e7f8ec1327536b812f25ca2b154b56c79aa0f202262171e3ccf6bb8e60","sha512":"ba2e5585bf36fabd2a70068400bcb3473968c6a7d6158273fcc53222850e460303abf70c05256f1d21c510a32f6d6842e886eefbc6d3f5420f9a40603216d388","ssdeep":"6144:MrL5bRuPtxG5+qI1gfCw1oUO+ahSom68/91FH1ks2P6:MrL5bRuPtxGPfpoUnVD2y","tlshash":"719419cdb7d6b4628393a474903f018fa67a28e2b44cd894f186ccd42e706aa5177f7d","first_seen":"2026-05-12T12:51:51.225895Z","last_seen":"2026-05-12T17:10:48.665517Z","times_seen":3,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e6581","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"216.58.201.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:47.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"GET /gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e6581 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:47 GMT\r\nexpires: Tue, 12 May 2026 12:50:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:71:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:71:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:71:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:71:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 157860\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477056,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"6e0b0da0028d1a4906c2640e1ed57c24","sha1":"fe256d873fc482acb13d2579b6505ebf3c1b8be0","sha256":"4929e3ceb5a803ff9e7d3a1612512767e30ed7024caaf6ab24476a6ddbb4492b","sha512":"f596573a5056d1ee7944edf2a933bab97a32094c09eaef40c38d8fd5142e93e61d67ed36650a157d8beea89a71b01c3f8e3550770a4564b3ffd82bfa31a6293e","ssdeep":"6144:dLqI1BsYCw1ou4wa+WhSom68/91XD1Chgan5UAyb:RsYpou4wtRwga5Yb","tlshash":"91a4e6cdb3d675625396f478903f018ba57b28a2b44cc89af189cce42e7465a4237f7c","first_seen":"2026-05-12T12:51:51.227297Z","last_seen":"2026-05-12T17:10:48.686593Z","times_seen":3,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-Ds8oq4WI.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:41.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index-Ds8oq4WI.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: no-store, must-revalidate\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f89MJbkgKi2aGClsC7D0U6uqpcP%2BGusytMvS%2Bqn2XzlU1%2Fray7kfVij8JAwpwC2PMzSCiUHOFe6t%2BidHS00RrFT09m5jl%2BAV26HNM95JwKpXcVngJnLizstj6mDSw02HuiKR7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98cf0cc2a56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1933207,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1081), with CRLF line terminators","md5":"c32078365cc03d7bd243235178c83e0b","sha1":"dc00902a667578dcdf2c17b03bb8886d56a3bb18","sha256":"56133dc082f66b79ab502603ce09e57358c94028f0dbb3a0800c3f78649e27e5","sha512":"94835d9a19d9ba536ae26956f6c3017bd01bb11f93735a68e36154b711721f51f0ad40647d13287192a92dcb3716f1d550f00ba4cf21cf784deb27f2ee4024fc","ssdeep":"12288:8IdCsSaYS7WoA2kjfJ78CF2xLRiFvqASoNiL4pkDqoI8b4D6DfYtWpwHqsKe0PvH:X2ixTm4v7uvqvhOiKYabap","tlshash":"b825d54b9ae028798233e379af2bc405f925472f128486577a7c95591f7381883f6fec","first_seen":"2026-05-12T12:51:50.99048Z","last_seen":"2026-05-12T12:53:29.998147Z","times_seen":2,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/tr-D4j3hTwO.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/tr-D4j3hTwO.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 810\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2BHtN9%2FUQL9kR0s%2Fmfk4rDtNX5Z4jtggZgMPdd2Cy7joc%2FW9Yq0GlSJKhrziiWK671IjDv73RKA2s72izGjIQoBR2I8g87KHAhCQcJjY5BpRcxjpDMOLZux3uaY9bDTdN7R6KA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cfc1cba56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1460,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438), with CRLF line terminators","md5":"042cda35eb38a3fe827ebecd15eef7d1","sha1":"102c2d57230473b84e9e7c3629eb2b377ef3f019","sha256":"401f803e94940707e7a4227dbf90eb43b2ebb6d99af5e89656af57d7075a8cb4","sha512":"a2044dbfb62f4aefb50bf02cc165aee3a43e6b76e2903390ff31bfe478ddabdeb3e9ac3decaef67ab9cb4d782d822e74a95a4968e05103c19d5181c4a581594f","ssdeep":"","tlshash":"e831824c2946eab287016883882f5f04f80c2a087136f1619ba4d421bab09ee807eb3d","first_seen":"2026-04-30T19:32:29.829073Z","last_seen":"2026-05-14T23:49:57.368212Z","times_seen":6,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/WagmiConf-DUgl5XWp.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/WagmiConf-DUgl5XWp.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 33268\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2FUfPJe%2BEj9oU4SqgM4PLYWAQuKxMCO1eUVRqB1h%2FCyImbagBaYCal2hnL1NLeIaMKxqW%2FFJrTKvX0JVImVvFttRh%2FhulfTkq40pFhkcXXBPq9UpJIBDUgkIDAlL7hhaIbZBQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cfd5cce56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":100999,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48214), with CRLF line terminators","md5":"092631219e2d2e194b760880b5ee7d3a","sha1":"c203f1803a691c9e1db008c19533fb251c81ff9f","sha256":"7ed67fc2edf74742c2e49ab46f69cf68bcf89d0d7c5394b4489173287b9eb532","sha512":"3fb526a15666e937099975aba759417e06718bab1c6a2800779a29283c430904cf1caf0f2b0f64ea332439f3449384d45ef14b1eb4dd2f285ece49754a2bce64","ssdeep":"1536:a2Caz/SCdwD7ZajZlO7jMMDWOx6uxPU6nUhVxSuS7XUF3waGBfGYBAEytq2bPVAc:bCaSlx5xPUaU+mEy1bPuv1K/XGk","tlshash":"c8a34ad07196b46103a74ae008bf440bf139ac34200e566cf269ecde79b96e99277f7d","first_seen":"2026-04-30T19:32:29.794827Z","last_seen":"2026-05-14T23:49:57.369116Z","times_seen":6,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/RunningLine.DYr_M994.css","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/RunningLine.DYr_M994.css HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/tr/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 09:10:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 765\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BQk0TCy9zZ%2BOQchm0BVlgUPkkmrozCtxEgzhvJ7ZyvGRlfa%2FLHotstZ4fAzGWYz1HvmSokb5GHNwfciB7%2BwXPZzl1NDd1376BdnXYfVEaNokGSfcG5e9eWt%2B%2FOqj45X0G%2FPug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9fa98d040d5256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2969,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2965), with CRLF line terminators","md5":"9fc3d5907507558167fe196694cdc82d","sha1":"015610549fc9a7418d7f4a548c003bae73430f3f","sha256":"1d7bddd9003f62172a466d67f4d1c73b3ee48863108aa29ae4bf5b9d944d3902","sha512":"b1553db2c5907a5bc14849d56edc0112d0c8b3d3ab74f2070107e78271c2e07c9e0ec3c6ae5bfb35a223ee86958b5c061c5a0904540e6faad3e0ae8bccfdad28","ssdeep":"","tlshash":"4c51eb02843624a457f3af2b7fe0935c9c2051bbce111e5ee89f166f03626d42a777b8","first_seen":"2026-04-30T19:32:29.957904Z","last_seen":"2026-05-14T23:49:57.34382Z","times_seen":6,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-CypFmzSc.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index-CypFmzSc.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/DataspotTracking-BU1VqV1o.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2410\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eK%2FelHrOkRmAQ%2BOZU3i2z9aZ%2FqZo%2Fbg1yrAwGs1bNnHfNo2VUyvGYzhnxzXqMqBriPmnQqH7NzZT0OESH51yRSW2GKCW5spoqavYqAt3ZuHZg8vXLR2H5jqDYlK%2BMYMd83HicA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d052d7d56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5966,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3085), with CRLF line terminators","md5":"6381d5ec167a888ef28cc49ade1908b8","sha1":"ae32b1ed887028ffcd5a3c8f74498cefeb4efe9e","sha256":"86518a0f26dd9191250065a91a38045b37afbea90b35587e52cd84952e4886a3","sha512":"b1f3a869a41ebb0fba666b3381aedba33b8178d76a11f6a7e8457bebb43cfbd102775ad1257c352c1e30533df321f1022bcdf1c2be6160f21d87d7bf27f3e2da","ssdeep":"96:cCqtCFVeh7FHpokS73s9lsv2InwLRiTvHUkmEQKFr0FdWpA6u6PEDdxrOq+IHWhF:x+ljijHf/0FdIuSEDdxP+Vj8EB","tlshash":"6ec1b85a31d07534c6e344a6914f42aeee3e7638f00f5060b23e9c5e3ba1115d6a3ebd","first_seen":"2026-04-30T19:32:29.79103Z","last_seen":"2026-05-14T23:49:57.416388Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/immortal-db@1.1.0/dist/immortal-db.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 19803\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.1.0\r\nx-jsd-version-type: version\r\netag: W/\"ee25-pMHxoJFNs7/Bok84dZEhK2Ol9UM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\nage: 637289\r\nx-served-by: cache-fra-etou8220189-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43474)","md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-08-10T15:32:58.760263Z","times_seen":457,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/11.al-9NYxR.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEhQIpCM8P9lDoad2_apQUn0p2pp_Dd7K1tSnCh2kWbihvd-wbX2EdewTK464ft0EMzE\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\netag: \"4a073c5805819d74eabd3e843372d502\"\r\nx-goog-generation: 1778587684312505\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 236\r\nx-goog-hash: crc32c=6eM7Vg==, md5=Sgc8WAWBnXTqvT6EM3LVAg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-length: 236\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-08-12T20:39:19.675698Z","times_seen":16402,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-D5EcCQyh.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index-D5EcCQyh.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-B89tW-rE.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:13:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 39027\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2CtvybZROVvQXFg4FeC%2FjX02LAmrUTb4SG%2BYiXLFmCiK2qt8eUvAn4AUeaQOCV%2ByqZjlbRZIG68Vh39TR5W51%2BJVJr%2BAFrxdur9uZKRmiSxdTf6w2VEDCRdtCirDKs7q1nWcEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cffbced56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":157557,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7a1be255be1f0ae59f0935129d64aefb","sha1":"951336661c010a2352a00432f4804365f8adc748","sha256":"840ce35b91324a5d62861bd2a583a2fae8cb05a344269a57e827065680726b66","sha512":"e5227a276b6c7d284e81fc14f3828a951668e71b5e46d06f42335923bc870fe14420823f285c17e988d15a45efdc169ec27f50284e2486f9f1854a5fbe19491e","ssdeep":"3072:mrwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1Fc:WwhFHU4HNwFH7MoOWexZFHc","tlshash":"54f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-04-30T19:32:29.92888Z","last_seen":"2026-05-14T23:49:57.306857Z","times_seen":6,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/JackpotPoolsWidgetContainer.C5xbwG7T.css","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer.C5xbwG7T.css HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/tr/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 09:10:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1442\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2DhV0ironczK2vIFiu15cMAWLjIXIPf%2BFjzYxVX%2F2ooN8gfHJ8vLiB0kmrRCt%2BnuHO%2Bp0dTpMgptFA8nr%2FhCYCGx%2Fn44giIpJIjXOq3W12hGHGPX9dybGuIF9sOy%2BTC0ZKB2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9fa98d040d5056c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7840,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7838), with CRLF line terminators","md5":"081a1b3577b027a7d3fe9932014641b9","sha1":"63fd987ffb13adff600764657c94decd0053f1f0","sha256":"1933923470468cf94868a980ec4b51a68865f63650caec8f71dd3191f3639a4b","sha512":"8c29e7fbf8c9f7944bb85714a3e32e1ed526425e5f645ee4ea6ccfd5b75a8394a7c26d4f2700e0bb0818e9dec4aa31e6cd6d2fa5c3e5b83eb6c85460e5d52e4f","ssdeep":"96:Xnxo6ZIBmmohvoDxTTFQPHf9bzsV/bV/YgV/FxV/QV/OV/tV/IV/EVSVqV0VOVBp:XnX1Xx3erZg+L8Pyf","tlshash":"f4f1651352ab33ac6eee6937a170e31c7b7c083dc7131559adaf124a4e9aef1061971c","first_seen":"2026-04-30T19:32:29.996777Z","last_seen":"2026-05-14T23:49:57.383346Z","times_seen":6,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/Tooltip-BHyVkt4V.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/Tooltip-BHyVkt4V.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 459\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oY9VLmPBBm0dpB3vlgEcVPHyLAneCC5VOulezffOahXh%2FUpge3%2BPayFn9T9%2FkHnHa4mIzbW3sCXkVDvNs2UVLEh49zKvAFXwjLWGB29hVpEgw5N0BDLkkqNQky%2FdnfPulHtYuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d042d5c56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":821,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (819), with CRLF line terminators","md5":"a749318be9752205b42d1b9189971a4e","sha1":"721feb3d960e535deb8eb5d92e04936e43013e0e","sha256":"c86970db4ff5ada2157e03be42523520634dfc56551de0df48c1819969d39e6d","sha512":"04ffa6d71b78e62a3f0fe07aa75e2942e549264346196633635fc7b7607c8cd7a6740c50b8e62116533866856814e51e2f5cf0529d25cabdaa51ae7640f90c93","ssdeep":"","tlshash":"3701f656e032fbf4e17754d6142d956d7153366c7e2f58f06038058f0ae4984d317b8a","first_seen":"2026-04-30T19:32:29.743301Z","last_seen":"2026-05-14T23:49:57.348232Z","times_seen":6,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/JackpotPoolsWidgetContainer-BUz-kRPc.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-BUz-kRPc.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1642\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uAYX9xSZ78aW6RngEKHAH806pUyYb1Kym0eXfRGc133Gw0%2BQNNc%2FIWoC6K6jz7Amf8b%2F0XFKStz%2FpCAc5MCcTwi0ghkJnTu%2B5YbELQUIOSJBYoQzlWkz3Vn%2B4vQ9H0YJUKqmLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d05cd8156c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4123,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4121), with CRLF line terminators","md5":"cf7b58f8370f7329da0964c7bcabfacc","sha1":"ca8256a4f7e2376d470e3616aecb9c8abb0f7215","sha256":"3358b36248d1f7383e9d561ad9c1e154e9b2dc78f6b70c8292c289b6728ad084","sha512":"698156f65c85bda85e617bc9d3beed4797902492e62b1348f5f076968adc035c86bcdde8e9c6017af9d7b63f33515af19281348e82e9e84160c6c6dd07a7c7c7","ssdeep":"96:k0ao/CpTBeLzTGNlTw6YakmD7+oAtPeY8ORtTzT:k0pBME6E4yoAdPPzT","tlshash":"be817417e01ab3fce8ec04e3502f910e367e0bfdd75605e8d0ae05240abd859f259b8a","first_seen":"2026-04-30T19:32:29.889626Z","last_seen":"2026-05-14T23:49:57.346096Z","times_seen":6,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_81708316ae460e2d7c097fe8bfca6077.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_81708316ae460e2d7c097fe8bfca6077.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39974\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:02:35 GMT\r\npriority: u=4,i=?0\r\netag: \"694014fb-9c26\"\r\nexpires: Tue, 19 May 2026 12:50:45 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2GQ3iao0Tes5lJUEtaL8lAc1hqOfoTumDvOIxDY0o692KYQYmNugoAuX1FnsXd1GLj7hTdUBTl0shUKFQjghAmcMkJ6cIEefdpHtKZx8sjxJb4G7e%2FDEfpB%2B2o9pue6LJa20FP0Bkyc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c0b3176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86013b42eae428e11372f049516b7ff9","sha1":"225a913e812a35bbd292b3316c359967757f3801","sha256":"e55c587494457c03fdc8be31a70077cbab07905855cdf253454ab76b7b069271","sha512":"524cd729a736a3cea55239e8a2cc8d1434bda345dc35a6e663552ba59db3be7adb4419ed21cfda32a1468a0dd735e910482186438c6cc119f70064e1d854771b","ssdeep":"768:IEmoxuaqs5NSF/H1M1photHZYN+MeKRlSGifuJvy2UbLWIKp8mkx+:xdxuUgFm1pmHOsMHlSms2P8mkx+","tlshash":"790302a130ad0760f79a56ebb11d8d3a91167fc149be3c782c780c5cf379fe64658650","first_seen":"2025-12-24T22:39:16.381848Z","last_seen":"2026-07-06T22:32:46.804574Z","times_seen":64,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_f00ad00088322c3724f224ea083d15cc.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_f00ad00088322c3724f224ea083d15cc.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24390\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:03:09 GMT\r\npriority: u=4,i=?0\r\netag: \"6940151d-5f46\"\r\nexpires: Mon, 18 May 2026 20:22:07 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 59318\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJTQSrClESuh6%2Fk9E1c3Z5Iiz%2FYpFWdwhPPlDSt4GcP8zk1OCc6IR4o7v91OMz274OrXGCfpxJhyz0mDDWG1wz7OyymwhPKMrfV9VeTU0yPquQeqiFGyKECUlCsgWDq2zBkOhGif1Yo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c2b8276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10a343e21bbc8dd82b9a351018ae46fe","sha1":"ea31b5994a6dbc5e2c49d5f6eeaeb1c6b16df3f4","sha256":"08550d26480f3f6cf58fb6b50ba9c247d35c1eba70b6f2ca467abec7c84a19e8","sha512":"7c2cd2364f94f5a82d27ea07f251eabd2b42a03d1e2ddcb671abb80b897803941c05d8d3e2910c5fcc9844d5fb0e608c6b2063f1bf7c932bcd501efc709f5921","ssdeep":"384:lKjKORGzizM3XqK4PhCDkQcL5F0cqx1/v+zgxjfTE/a7PPY+xbyWBuPcCgfLdC:lQ1GzQM39QEkPF0cSN2zWjfTIfKjBe5x","tlshash":"5eb2e089da8861645c84f4483f4e24d7bb7816dcebaf083e978d0ee835c99b577b610c","first_seen":"2025-12-24T22:39:16.06566Z","last_seen":"2026-05-14T23:49:57.36494Z","times_seen":59,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/491.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/491.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1342\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 07:13:16 GMT\r\netag: \"d447160276dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hTC%2Foezw33%2B5meeDalTiih0az8Z1Bdelu2vJqGtoMaQCUXYv%2Bd%2Bpdng%2BsAwHUy9RBxlVot8aKxp0U5dueWS265wzMGMdOsFCD%2FEcyh2Ibhcy8Uz%2Bq%2BWa8ZWEelgFENz8zusH5Y9h3%2BqRbIsxbQ%3D%3D\"}]}\r\ncf-ray: 9fa98d0cdda556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1342,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"04fcc9086a9204560b5ebd2e04e30367","sha1":"c1bd548a1456fe939ad907119a60006e3f08266f","sha256":"3430169ca3e3e577faf079f2849400b81e0879a1d712d6b2b2377e8097704584","sha512":"ab577e3dae023a7d5a05a4c0211012a7302f3aacddbb3b82493a90670846d1fcb37d287f85f0aebc0ffcffd8f5db23a915518fa34bdc6bd1335fd6300debbcef","ssdeep":"","tlshash":"a72108c25f6372f6835685af418ba016f39baa718a98ee2072d6401000df0879c2bb62","first_seen":"2023-09-23T15:54:58Z","last_seen":"2026-07-22T10:04:47.810344Z","times_seen":186,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/loader.png?v=1773142319","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /loader.png?v=1773142319 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 09:18:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 456\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bmb1ZU6a2r19DleV5%2BjmoYGPBe6JBc9Jo2nSu9HVjUcanwEtCyR%2BAPp6cwfQz93cNwjuClIaKFezUlHEZv1HYqk4knjPBCeLymW%2Fx40o6s8V%2FSCIfxL7DtC%2F1JdDlg%2FYB5riiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cf91c9c56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit gray+alpha, non-interlaced","md5":"ce13d4aab7656181924146d7eefb42a7","sha1":"89af3054ab4cf389e7e905d2ec756095801680cd","sha256":"393b5575ab9863a7702eb2a6bd7405f3118d0da53ff1a3257d1d7353a056a59c","sha512":"4153a0d45eb10ca02aa1bca3f3dc78529b3d1a23d582ab9f5831ba71b9a5de126253d469d28276160f1ed27de41049491125726144c40e17a5fe2c26a77406b2","ssdeep":"","tlshash":"14f023d69fe31ffaccc05a9a7437c3710c22824a829936149107009c645ad2f8dc4e1d","first_seen":"2025-12-24T22:39:16.322656Z","last_seen":"2026-06-03T04:20:31.988411Z","times_seen":59,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/useOpenLiveChat-CypT5USk.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/useOpenLiveChat-CypT5USk.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/LiveChatInc-Cwww7iu6.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 342\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6SB1fCmrzOB%2FewdsEXWIN8UFEStXW4%2B4pUZR4OdjQRCTzqRLllfbvF6K8lKe3delSPJMLKJ7Fxtdn59THSHkReKMeFr5Dz2qoEU0K5MnXpPwhWk%2FIjrecRjAg60aX1vD9LJpRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d052d7b56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":584,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582), with CRLF line terminators","md5":"27380365e4a578b11a7919521758e963","sha1":"3bfe048899862ee5bb0f4b66dd6a417e9d7c54d0","sha256":"85806610d74d2079726ace5bb5c8a44759e5c9f5fd4c6c040e41f96cbcbd04c3","sha512":"cb4d44bd5c744ed19044690fdf2df0d90d0c5db417ad79bf326a57ed12337db88b81df667bb76f506a0b5605506b362609bcb2688020ccb97e69b473e1511b6a","ssdeep":"","tlshash":"6ff0e1de86989e7c80c09ec1515ff4f45b3816a4740dc441a43e3cdd642480586bfc6b","first_seen":"2026-04-30T19:32:29.842561Z","last_seen":"2026-05-14T23:49:57.437801Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 19:35:08 GMT","end":"Sat, 04 Jul 2026 20:34:55 GMT"},"fingerprint":{"sha1":"29:D9:EC:AF:28:AB:86:B5:F5:38:A9:38:B4:CF:23:E6:E6:9C:63:04","sha256":"83:7C:8B:D4:F5:FB:85:02:A1:F8:37:D9:53:80:6B:8E:C0:ED:FA:F2:DE:40:56:27:B6:C1:31:C4:A7:8C:01:8D"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fa98d05a8844c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4368,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1594744c430c14575dd987b06663f8af","sha1":"6ae3a00b9045083fc80dba950b908f9e7513e211","sha256":"db922d127c83813e54ac9a7e4fb61318bdc34765fde199edd3859da07f9b1a04","sha512":"6dbc4888f6eb430e5c148b063707a5488e01f7a4ffef184ac67db37cb847c0d69eff429b0c1bd3122ca4b1594229d6f4f600497011a876d5ddaada4d1fb9569f","ssdeep":"96:nNSNbh/YiOQxX+1A2teUB7SOMVMrhIa1WUqrZurozkhLQtwN:8OQVqfhSPbUK6J0i","tlshash":"ec9110b79f444a5e2b2407c9702d3e9c855e250bcbc09ceaf0c0cf2984f9eb967559a6","first_seen":"2026-02-01T05:09:11.282943Z","last_seen":"2026-06-06T21:30:11.817911Z","times_seen":246,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":18,"dns":23,"connect":0,"send":0,"wait":210,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_d0a1225eda1ba86a7a453c6c4d154d37.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:55.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_d0a1225eda1ba86a7a453c6c4d154d37.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sKrHhLHxbCwG0dsK4nLA88r6FHdhyFoVUCojb7Y8ikU-1778590250.2254179-1.0.1.1-g6U2bxkkmqyMj32lRbnI37iOpxN.CwYp1Q8c.Z7nxt8onAqywSwaS.SQP.Zg8oioRYb_lw4szTcZzeSt4Gdwy7ZXJtuNgqZQQ5_0m7gclsV9QIZuZoslsQAXhRgmFByW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50226\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Apr 2026 15:04:19 GMT\r\npriority: u=4,i=?0\r\netag: \"69eb8673-c432\"\r\nexpires: Tue, 19 May 2026 12:50:55 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3U%2FEbdWnvonV7iFi7p2SV5JposhY0YMsBJC0OUpCMI2jOrjGdgtng6IzAjPG602LPt2JAk%2F0Cvc1fzD12Xs5ja2DyMrjrBiyxEgxtWpn71wBfCJ29uA0jHNqLKMMQNC2wi%2BPON3P%2F8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d493d1d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fbbe2aac384cde7a12aba7798e68635f","sha1":"e21b643e404b27aeff1b876e57729f0105968c30","sha256":"4b9609c2414ff9d7828470d78ee9fe203b625ea00bc8664a05f4668c79953607","sha512":"20affae5c3ea9bcc592f4c3b3dd92eb2ac1216dcd28c6e7e9a6f5cf98129feb282ae60b24517000e75567a964c0bcee39b567c824f45f84d6e22963433a29098","ssdeep":"1536:YwyZ/a81tYT3ei0DDnzHFg7BoJVVZocUnBhw:YwyZRfYT30HzQEo7w","tlshash":"8a33023214630134b55d59a003e7c271b2785ec627b86f99a32bf5d884b90bdf8eb753","first_seen":"2026-04-24T23:41:59.850376Z","last_seen":"2026-07-06T22:32:46.546777Z","times_seen":13,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":50,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/ButtonWithAction-aRNeoFXx.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/ButtonWithAction-aRNeoFXx.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:09:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 193\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQr%2Bc9MsLfHLa5xBUYedY%2BOS%2BJW%2Foc%2B%2FgrTokCUb98T3PZSm7QznpBe%2Bf2i9HGPwR%2FzV0b6yol%2BM8VHmo4iKdY4mYof9O%2BKfu4vtP79LLF6fR6TsGJ0%2B0UAI%2BihY4detiKWMFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d021d1b56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":268,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"25ece52b40728ac71e7b869661677dc3","sha1":"1bc3c13781d3e5f633ea81c18223bd26f0961024","sha256":"27d5490d9c8258530202cabdbaf380b7955ec0f3ef6d2d556ef88a8ab8342d73","sha512":"aad4894c7059184b2b1153b1e205bf166f1886869ae95d8311a4f77bee7a4884501a8d90a15c51ede3143a88dcccd4a07e841e7d34304f1b9d509d59ae87ba98","ssdeep":"","tlshash":"85d0954b9481d2f903c57990b31bc0112d156d74e7d89551804c78543b3259e852fa2b","first_seen":"2026-04-30T19:32:29.906761Z","last_seen":"2026-05-14T23:49:57.435066Z","times_seen":6,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"dataspot-internal-wss.galabet1074.com/socket.io/?EIO=4\u0026transport=websocket","fqdn":"dataspot-internal-wss.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dataspot-internal-wss.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.galabetl075.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: DhODSbetMDypekDfogxRqg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 12 May 2026 12:50:46 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: OpPqjiLiX1jMyMKgP/2JYwZweNA=\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: io_affinity=1778590247.071.1144.102089|a4492465e2c0cb857f789e83929ab8bd; Path=/socket.io; HttpOnly\n__cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo; path=/; expires=Tue, 12-May-26 13:20:46 GMT; domain=.galabet1074.com; HttpOnly; Secure; SameSite=None\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FcIIxdPsGzaSn8nbQlIdcTh7VXsLTpccXt7O9o8hsMDhqeu8igh9OOnW7XY6fyfdANGpkv4jBllFew1WaQ8BFRq5t65s4iNmmEl5SyazUMtYp4cj%2F41eMd2omDc6Wt0eQFZwqDA7xtx8FQV5kzfsFtYMYCgMJOjT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9fa98d0d8c52dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=602\u0026min_rtt=517\u0026rtt_var=157\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3126\u0026recv_bytes=1434\u0026delivery_rate=6808777\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=3550568d879335a1\u0026ts=115\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":88,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/f0c3267e4fce331c2dddae56b248e3e3_casinoGameIcon3.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/f0c3267e4fce331c2dddae56b248e3e3_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25698\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Sep 2025 11:19:31 GMT\r\npriority: u=4,i=?0\r\netag: \"68c401c3-6462\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=t2VFwIoWhcNOAY0Q2L3Fn1YaklgNc8m6EgMx9f0ajxs-1778590246.2128696-1.0.1.1-oQkmQ.B0czusUtAZ4MMAjvOsEKSzIrtZ6KD9F_FfjcyL2A3ov.U4DiRcbcCNFvC7fV5ztwn_AVm9Ea4ibnh5VTNWOqVVVdzmN1Fmu_AK_.7.0iqZx__PrmeyUQ4jQVSL; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hlqdDJJLucVS%2F40E1eGB1SNBRMYpbjLD2oUZa9guK%2B8FeLVVHsgOkCpdAi2xuZNV0aT0aEuVVWFFRc5aNR%2FrnGmnn85TJNemxqsUvsdww%2Fik4dpV0NW69ULimNMe0M%2BklYbfSJQJ%2FWA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0edc1376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a9dd6c706e7a6466110ae7adade31bf3","sha1":"3c9a9f4e4627dacd8ba3ab69b78f4615a3fc36d5","sha256":"1f958ff31bc79b79462c04062be4e4019cd267dd297710fa7058249d5a6287db","sha512":"efdfc2f319093c7f2a7b8391b46ac746165d030ec83edb8761a5dcef74cf4a0db7ecf220c1550aaf3b917ed1192676c0f6ff54ead67be539f27a28f76cc360d5","ssdeep":"768:9vR5hsEXJt+KLilpeWF52Kc67sxQSmWBWOfkgSfxWSf:9vhs8JAKLNWLYlmWBWOfyZWSf","tlshash":"4cb2d0ca7251a2c2ffe6b492ef88e1d45c6bc59071c419172b086d96a7c1ef8d582f82","first_seen":"2025-09-18T04:34:12.22861Z","last_seen":"2026-07-30T17:46:52.807448Z","times_seen":46,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_c2798e3c84b9cdb7f38468addd0d2cf3.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:50.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_c2798e3c84b9cdb7f38468addd0d2cf3.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=WCbyG3ZRWcjrhuKhjQ2eUJwYDC5kwndgGguoMdEjavE-1778590246-1.0.1.1-bMESR3a_Ez_sHzoJsuvJUZo6rRkqZ5nGJcxUda0Sdrv4z_8ZbPd0KT_ajSA5RwE1n53vJRMs4kOs7Wf5tSm5vrYihQCnWSo0cd4Wj3BNNXA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41468\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Sep 2025 10:15:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68dbadc7-a1fc\"\r\nexpires: Tue, 19 May 2026 12:50:50 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=YAE63JyQF2qAcCES1gF0x5woBHMCvbzN9PcLIKJnBdk-1778590250.1774795-1.0.1.1-muKEBrX5RNJVPJ5lPjRk6G8hBN.XixecviHzNnF03qhe.FIE5ntjL85a7U9ZXDVorz9hCV1zLf3NpbySuSjl9NT2T68ke2bxampqoRwyy3f4yF4on0mSGw3SFCzLbbXv; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2joI2UHOYup6spbbyoimXNAKf4CzAK3a%2BaoDnvBkBC7w0Cas5RVUbe8lL7RkBKrZ9O0tMNUZ6asRZtuebp%2BuVcXsqOb165E0wviCrI%2FCuJ%2BybFiIqBKVf60G3G6bfMR3IY5mAnD%2FDkc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d279fdc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"73cc0bbb436e26b9b598c9e48ec14826","sha1":"9fa3cc5ab9ac1a70c8c28e384ce695bd2904fada","sha256":"fa1c9533908deb22f89990a240a1c0ac2aa61a5a33e8faffc1dc0475e33c639e","sha512":"195f91ab33d65511b31e95308c95b79a5c097f78a0bbe4a99e081a5704085fe8fcc601ae0d0adcb0a439b0a9bc326f597d62e31c26eb359a610f474a41aaf2f8","ssdeep":"768:EeFn2FhdX/7CJjYdDHjp/VvUlF9791MUC2Fon7y+sHuwQn2iCP2TqbyTu:i/ajqTv8lF95+fTou7CEWF","tlshash":"5013011dde495ba80772339c878fee86d0924aaede24852b18ff112997047ec43af594","first_seen":"2026-02-24T14:23:51.089025Z","last_seen":"2026-06-06T23:43:56.054142Z","times_seen":53,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026version=71.0.1.3.4.20.1.1.1.1.1.3.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_configuration?organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026version=71.0.1.3.4.20.1.1.1.1.1.3.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 1713\r\ncache-control: public, max-age=600\r\nexpires: Tue, 12 May 2026 13:00:42 GMT\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5942,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (5912), with no line terminators","md5":"dcc6351807fde62425120232a49e703f","sha1":"573cf2f3cf201d0d1b503a52da9da4ee6d34119c","sha256":"807c669e2445492c7b07fc0ca4d9a317164ba780935d85e627e9110adb5f0ea9","sha512":"d0d5b29cb79df31aba52a896b2fe3da459529d766f88da943bcce28f1eca3f3978c468cd1107d4b376914ab91eb2ac63668929d0b6888e13716af89d3529c939","ssdeep":"96:qhUsXhUAvhUwhUMqdpsTJV3ac/t017gWrZJPJwJtJcN7QcGIKTe3PJvCLq:qGsXGAvGwGRdemgSZPTQ1IK6xK2","tlshash":"aac13325834fc87b7367925a62cbb70f3018517da0f9183be474ca70b18a1c7d206daa","first_seen":"2026-04-30T19:32:29.877367Z","last_seen":"2026-05-22T17:22:58.319047Z","times_seen":7,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/walletConnect-CiycSUBb.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/WagmiConf-DUgl5XWp.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:12:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 968\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkWMOiBH%2FbwBcgKlLlHgraA2xUo1ofrMfH8hD4CNY4pO1nKzL0kY0hsGWC33tBhfPkOPzPj0O3Y%2FvPFn4sWq%2BVGqZeiVfEZQlz%2ByrEEFT8YOEfL4r0MT0F30gocZVJxqNzZeRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98cff1cde56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1999,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1997), with CRLF line terminators","md5":"8b7c6c60fe7ada749160139c01cca4fe","sha1":"a6aa718e73afe4c831661d7c86cb4a8cf5f3078b","sha256":"0d26e1e1ecd21a2605a661c09f9a3b86fafdaf555c547fe108ef69e8a0257d12","sha512":"08a9dee9da29e1d216a8eda3c167c2ffddde30a9730a36b5bd9abca8aa96271bff6014bedf26efcdb1fd7e921e72b4ddd80a1042555f050e48a0a9fd12536c42","ssdeep":"","tlshash":"7d4153ed9a14e5fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2026-04-30T19:32:29.837535Z","last_seen":"2026-05-14T23:49:57.324846Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/BetslipButton-q9-vX9A1.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/BetslipButton-q9-vX9A1.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:09:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 283\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SOImLN74oPuC8ObvhUi6DmfoVIDoeEiP4Ev5oz8fDewqwMbQ%2FCnBFRXtT5UfcO0Gn%2FXJ7UjxzjHBBmTZ0cnK5shdFloavOwgobRH0DVJWuNM%2B7TAxzFMliub324Rv8%2FP8eVUaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d021d1c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":419,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (417), with CRLF line terminators","md5":"c7e4933f244dd63f3f281dfc36cdc554","sha1":"6a65fb5c6acacc9b732e5735d500faeed0a8a911","sha256":"6f39a54faf2294afe759db36bde99d4bb525aa65b739bf1f29853220ebc0e802","sha512":"d9337e5334baf246a9b29aee8e33274fe7e62c96f90180df21a07beb8fbbbcdfe2d707cc1950d727472806f6c22f594219175a9eefe616fbff7c94e382820dcb","ssdeep":"","tlshash":"14e0f186c848c3fe07461d81320ac101382255bca344f5d280ee7c557f7458acc5f92f","first_seen":"2026-04-30T19:32:29.932641Z","last_seen":"2026-05-14T23:49:57.519182Z","times_seen":6,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/CasinoWinners.D6wkh6MK.css","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/CasinoWinners.D6wkh6MK.css HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/tr/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 09:10:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1222\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bwNn%2FGB5agXg8gg1MYMti6kI7Zb7IAZgXVR9yYgYTfDXeiN0ZzMwi%2F9UVUkU7mmNraNkVLKo%2B766BfUa5SkVCK4Jj%2F%2BiWlLReT9k73l1RfB7c3BhBMJp%2FDCKqNvjRf9UHHSCVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9fa98d040d5356c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5944,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5942), with CRLF line terminators","md5":"30481f6e83281d998bf76652cb58c5a9","sha1":"32c2a383ddcfbffbea4cb32eb343380c61a3fc55","sha256":"9824046d9d09f60090cdb676e73e7e6b65aa69ccd56ab0473a2572861f85020a","sha512":"3564fc0ad0057fbea9d82abe492effe898bfed95d09ad6c9b43a36b62b01286eb02d2806c87a8e4586018d6e6c117ad59a9b403fe03e628d152b125e93eb1e86","ssdeep":"96:dNC/PAiELUuMyH/KEwlyUUYm6wl6llLlDlulNAGBc1h8FtmlTFtHjWeBwlEXkqWe:q/PAiELPxqyk4FcVFlBkqWAL","tlshash":"5ec1324356492b7ab3f7ca872520435c79195c9ecb232b48ada81129c3b35df11387bc","first_seen":"2026-04-30T19:32:29.938463Z","last_seen":"2026-05-14T23:49:57.367133Z","times_seen":6,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/Odometer-CVXFbm9Z.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/Odometer-CVXFbm9Z.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5481\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fjViQeSfCBuH7ZofvnaiblNhAjoREyZjjBgVZGWH7EyI7k7vDeEZ0qFzieG15%2FL7luW2JDQgQiEjO3LmHEpYfUXwD2Lnz1ORApGQbik8r1qz5wvvehsfqBAOYuo3kMkHY%2BOZsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d041d5956c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15625,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15623), with CRLF line terminators","md5":"363099a7aa80b08adbcb4fa6a5c235b8","sha1":"5df01cf115d0dacefc09e501630edbebb41eb84e","sha256":"fb3c5f2d67d192d60ace689027fafe68e0f2625283ce35c94499366b80600157","sha512":"e73d4427fa035d5895dcf0d088df617d1df84f70b05a7ef046075ffd8c8bcb2a9a36ed0efd3dbd049ed1cb37f50f3dade4d202c05d84e5b7f309fdfe59025fbb","ssdeep":"192:uAd7+NJtQaM1S0KCL529Xskmkjm6H/I7kauLPH7BNeSYpkYaSBpC7Tl+ea4PFG:iVQaM19K0khm6m6H/LPyFtX3HeNPw","tlshash":"45622a89752272344393b2a055bb0609773e5d6a3809405db67caedabe32c19d12bff1","first_seen":"2026-04-30T19:32:29.722128Z","last_seen":"2026-05-14T23:49:57.372946Z","times_seen":6,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1074.com/api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\ncontent-length: 2551\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=QEE5LVnQ9ExbVAoR0QkNvQGy_zQDkv4GtFPsormR03U-1778590244.6141517-1.0.1.1-HDV8oCFWuz4obgBYmeY1o1Dnm6FGjLVY3Vm0DFbywu.D5qPSp1TrNnFoMLQjcjR0zvHM6IsMWV7SI6rGsQ.sEq0ZPGODxJspuCnQfUgXd6.ZKEFKhvueNqkqoXR2XtoL; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rjj2%2FdZ4IkbwiZnoZdiFvNmtIrLyCVYAZ0yubRfdrAWXq7TqxAUqSYdCDdXCuVow6wE%2BpA7zRjrdHcssaPtYOY1ajsApUd%2FSWMEJPmY4vkTMzjMIIShMyXMD1k5e2V0r65pAyhTCMIQO\"}]}\r\nserver: cloudflare\r\ncf-ray: 9fa98d04deb7b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12359,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3172fafaefcb42db9eb3ab543ef7b48f","sha1":"d53ec4b20406e74d83cab78a9e788560c76b03c1","sha256":"61aeea6447b685916806982c409ac8af989aac1bdc9c5a4b8fa543046b435a3f","sha512":"41b909f4ff994ec9fedf040c5fa7dd01fb22f97e6ca57d5c2de298b3f02a270f320225f074277ef6ecf6d6db23a926d8a9afa2f92955dc2be75711d57c5e5c9e","ssdeep":"384:JecZe2jkvpPHvaaAcPT282vDbomvll5ffFaLR/LHtQ/u78r3A/0QqiXoV7vp+doj:8AVCRxNiR3D9/30ND22Gw/x14Fxuoj","tlshash":"8d42ee23b02dddaa4b547b40b4c7394ac9ad1447dc0f9a70dc858f8d92ea629c6e33d7","first_seen":"2026-05-12T12:51:51.240557Z","last_seen":"2026-05-12T17:10:48.720102Z","times_seen":4,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/useNotificationsProvider-D7YdiWNv.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/useNotificationsProvider-D7YdiWNv.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/FeaturedGames-CW2_S--l.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:58 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4DcdmXrQwxbehFVtY%2BZlVgkB1FiThaB6TLbRp7zqFepv9IBlqKfZyT6xkfOMLvmwvfvMQLBYU6%2FfdQ5%2BKDd6dEpyf2Mt9AsHWP6lArPCGiLGPmeGXVI%2BJwuIBRm5MDFApN3Qw%3D%3D\"}]}\r\ncf-ray: 9fa98d06dd9556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":93,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"76fc29f31098733576f3109dc08bf01c","sha1":"d154589364a17678c17f5b21dcd9b7c7eede5ee4","sha256":"8e77528d96b5132ae9306a4a71b205dffcdb013e82e5e7e5c9ca4ab9f745a63a","sha512":"da7f24bc5adb5bbf5202a0ff224f867ef00d661344f15ac51b8bcd8365bd9bd56bbb0e9de3d56b795b367d7b24591c2f1902863f24baf95ed6f2ddde347adec2","ssdeep":"","tlshash":"8db0123318c003f022020cd8011498290630083c3b918ae00224920c21e9099830fd04","first_seen":"2026-04-30T19:32:29.720769Z","last_seen":"2026-05-14T23:49:57.374863Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/fonts/default/Roboto-Regular.woff2?v=505","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:47.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /fonts/default/Roboto-Regular.woff2?v=505 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index.C0U6OaZb.css\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p; _ga_MCEY36CK22=GS2.1.s1778590245$o1$g0$t1778590245$j60$l0$h0; _ga=GA1.1.1624701396.1778590246\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 09:03:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 72024\r\ndate: Tue, 12 May 2026 12:50:47 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1kMg7vFRIRAjm23ReVRAiIzaYh9wDlDVYzFJ4tCNgW8NQl2V%2Fv68oEHt1fgT12gYWSdUyRehTX%2FmStlP2vx2XC6UTboQxDdZkz%2FskQtKWfnOjSUkSVCmpOxtn%2BEdxx%2BSLwqxDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d150e1356c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72024,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72024, version 1.0","md5":"30c281e94eab37286ff7770f3e51858b","sha1":"7a5cc673f005e9f384e322f8fde4795b0f750778","sha256":"c4a69a0b671392fe569ef74b4a59e0d2e769837ae59beb3944ac72ea240912c5","sha512":"d5b0686a2dce238f2c825169a19f0425fccdf6fe2d6d4e3704a02f618ea96bf1e0827c158b63b221dfd1f35094f4a420abab4ebf984f9993c6a080ea44b3d2a2","ssdeep":"1536:Y/pXAWA65c5JbaWR/9Al5ceizufFxY4lcWVZGDULZu8uqO1:apn54BREjCuvY4lRaK1uq8","tlshash":"3e6302c4ae4f1bccfd67d5add8859e6a1b8ef1b09320106de3119721ef4b403b3692a1","first_seen":"2026-04-05T07:31:10.87701Z","last_seen":"2026-08-11T20:15:29.032202Z","times_seen":467,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.BJJ-MO8U.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=19615298\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=8ed97eb5-b789-4147-82ee-9d01ac550957\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-12T12:50:43.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/4.BJJ-MO8U.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEh-w3RBUbW06iVTcpcY2OPGb7tmv05POoALbtXlJKifJ2Yeu7bhw8LJPyBYLE1xieVb\r\nlast-modified: Tue, 12 May 2026 12:08:04 GMT\r\nx-goog-generation: 1778587684451854\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 207172\r\nx-goog-hash: crc32c=SnLOKw==, md5=EBz47wzccoat12Yhvs5Wsw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 63842\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 12 May 2027 12:50:43 GMT\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":207172,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65500), with no line terminators","md5":"101cf8ef0cdc7286add76621bece56b3","sha1":"4aa34fcdebe3f90afd36c860fb7dabf04850e010","sha256":"3305a5dc7e4768df6433fdf5d272a7da5a4109c498c8b67d653b00c0c42a06f2","sha512":"691d4c1c446a954cee31c93d295dafe1b4bb8201eaeb46b4ee56741213d061615cb9e32d8443d09ab6b6f8e1644cebbce1bf32b8db10a5f1f12b6625ff08b11b","ssdeep":"3072:FdmtYfmF2FKLbB/57O5CxGWZ2Pfp8kE5MwfMH+rUqN8v5iNRawP3:TG+mt+5CR0Pfp8BMIrnciNRt3","tlshash":"a2146cc4f18ab93587eb34e2587e1002f63d6d18b44c8160fb5cdeb639a518a9277f2d","first_seen":"2026-05-12T12:09:28.959554Z","last_seen":"2026-05-13T11:11:34.444827Z","times_seen":76,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index-B89tW-rE.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index-B89tW-rE.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5868\r\ndate: Tue, 12 May 2026 12:50:43 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IXHKlV8YQ0%2Bh7XlizR7O6RNFfNV2eaywQ5hMQX37nrLfl7nSTaEPCiIM14TL4x7EbmlN3rzGufFtFzxzsbI1arKo6W5dmaXjCEmnQ6nwuX0Wik1jf96juRQZ1cqY3pK1dfYgOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cfd5ccb56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18029,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17806), with CRLF line terminators","md5":"d8737e5bf55aa6a8c17fcf533dfb5d25","sha1":"858f882e4d881cdd16c127cde97f6a16d543a495","sha256":"1eea5c2f11d6c5223465074ca6ad2a8eda28f238e7798f99b895a73df1f21c2c","sha512":"d0f6897d3f18689e774de61646af49ce28d5631f3c4522588c0148e761d6a2a80863ab0297b26f0f18e0d9309300b3204008ab34485d1ede4cb0608cf1993e5b","ssdeep":"384:9Mci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJd:9Mci408FFnJrIjE3D/OY2E0xqpc1NKkC","tlshash":"0b8209d0e2b4f7a642e96acd80392074f2218c28347dd0f1b6b6edda70664ca956dd37","first_seen":"2026-04-30T19:32:29.771105Z","last_seen":"2026-05-14T23:49:57.370064Z","times_seen":6,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/header.json?v=04/21/2026-12:12","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /header.json?v=04/21/2026-12:12 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/tr/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 144\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0rOlzMuMK%2BoSsDXIe2bwmDHt%2BM5VnacvnhoiNxC%2Bki9gF4tmPNlPoKjVm4vizonQCyU6O3CKDUfi3FH4eFJMaOdoiN0SoSUTZeOtIFW0wmT3FqX1JM%2Bbuk8r%2BxjYJt7v6vE4zA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d012d0656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4fbc119c5c8514e3587fdfa01f205866","sha1":"a396d7f127ee203b471f1a7e507184318e74163d","sha256":"10279aa2fbd66a0c0140d4b4cf9a39b0c9bd14b18bb35f1bd6eb26eab355b9d9","sha512":"9eef97111b2474b705b496860ecd29c7c591ddcb79887d755e5ea7bcf2d578a68bbecdc54ce4f11954f679ff2b8b5cf060da8cd4287a78a1fc3a92fdfc6125b7","ssdeep":"","tlshash":"cdd0a73aec10da7073a0c413c18067801140e514d644485c9cddea5a93dd7891180b67","first_seen":"2025-12-24T22:39:16.192168Z","last_seen":"2026-07-16T16:07:12.950479Z","times_seen":80,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/pageBuilder/pageBuilderHeaderInfo.json?v=04/21/2026-12:12","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /pageBuilder/pageBuilderHeaderInfo.json?v=04/21/2026-12:12 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/tr/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 180\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oFmKgvIwsrvx6ik1dA04StV%2B9We%2BOHWsaZZDs3Bobckzj3pGkTkBOpupwIU6bAwG1rDZXKCDU2F3f%2BRNy2wtMwsHHpKF%2BEAZalY%2FeaNJaFIkUlWfwRZuRLTWGNhoR5A7pw%2FDwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d012d0756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":283,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a073ab68d03cc285a2ea057683b697bd","sha1":"85214b84cecf1dcad366f847f29f079e47fa4f6b","sha256":"22f8711fa180f3491a16949412c0f771411db6102c183564c592ae3bcc59dac9","sha512":"526285a76199b4a6719d986101a3ebc29b0ba3457af765836b38ce24ec8170528f62c647e3b7acc85f323b23634f3ee1dd05032de06798ec969cd0c7c4dbcc1b","ssdeep":"","tlshash":"26d02b3aac00ed7473d4d413d29067802040a409d744485c9cdd9f6fd3ed3851091b57","first_seen":"2026-03-07T12:53:25.048544Z","last_seen":"2026-07-16T16:07:13.001981Z","times_seen":61,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/emptyWinner-BYOhvUKK.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/emptyWinner-BYOhvUKK.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 904\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frFtV6Ld%2BNQBr90J%2FoldbbIDowN%2FqfDbMUT9%2BKY1LntOWB2r6%2FCu0SfSKkU0QVBYJ0sp1LFyPaEixNk%2BT45zz5svMMNbjy4fdPQODUUtepaWURL8%2BYmOYszCDPbas2M26QHQ1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d042d5f56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1788,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1786), with CRLF line terminators","md5":"6efb2e372d5a13e64629f80c57f5826c","sha1":"b84143adf54d4386728e648149f989c0e25800d4","sha256":"2dce6eba35c5f219b3f3c7beb37f5032b435206e8cfc18a3386e27a8ce497374","sha512":"cdf4615cbf0231fe4b77f8637b739071a8340b9e234fbe5e9f24f42e3f6dd281c4d1585e0c68241045204c7f4cf0f40690086418368311b9c5a1d693c4fb80e9","ssdeep":"","tlshash":"8531658fd5458a38b3674c9591d9e680cf142697ee34fae083e40e9ac5a5109c64c74d","first_seen":"2026-04-30T19:32:29.781449Z","last_seen":"2026-05-14T23:49:57.494198Z","times_seen":6,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/489.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/489.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1284\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Apr 2016 08:12:02 GMT\r\netag: \"aa95c7ca59bd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 17:12:32 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 70693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FLcllfgwB2OShXP%2BvFfPoCQAoM0P%2B81%2BLWcYgzJaSdxhbWA48WIZr%2BsC52CC%2BOACXgpxqGfiJyRee8R9FC3J5sMIR%2BvhILLqo0Px%2B%2FGwBrYz9FrYC87JIRp%2BVWYGpkDbUR8JylV%2B3YjLfKCmTQ%3D%3D\"}]}\r\ncf-ray: 9fa98d0c9d5d56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d82ff322d525bbf2856d9853fb270b74","sha1":"8e6e8f467cdbdb47386a13a5255524467dd695ff","sha256":"54b659f5cc89b45942acdb0f6fca0978cf24fd53df24d9cb52d4cddfac3fd258","sha512":"2564416e6281f3e5729addbb30d2ae56570bb83afd237869b7b9ec2b0cac1fa0c281db00fd9d304d84f65e0f358866b801069dc3572291789b92bba05eab025a","ssdeep":"","tlshash":"e321ea7185bf312fdbf74905819c5530bf1520ceb5d4e44c9e488412947059c8bed631","first_seen":"2023-11-27T06:31:39Z","last_seen":"2026-05-23T17:36:46.319292Z","times_seen":269,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/logo.png?v=1773142319","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:43.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /logo.png?v=1773142319 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T03:54:04.418886Z","times_seen":17865591,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/live.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/live.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:11:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=iVOv3N6j8fe0IKFg2dlHJzKQbER7MA0bBwCubo2cWEk-1778590244.1293163-1.0.1.1-ZxvE2M7hm7TxEueoAcpNi6fO6I5vkNSKFRmUPO0T_JBLyTdWnmkgG0hVomWszRthy4KThhv2HYx8ChWXCje7OS9SviUBXtbeHuvArcc.JlQjPQx1LB1A8EPmiIzFuyLt; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exph%2B4qFDBmSx2rrxo7cTSwevcQMdO2kEbXzmWT1VFu1HhERnof4rAfncD11D%2Bl72QlwtPPj3YaNp33SVMb718ocGjF65olvSKswhdw7RgT7t0jGc5LyTnxYg0vr2B59%2FJZSrJyBafc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"686270d7-223\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01caddb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":547,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"177a1ecefa857471d64fb388cf5125d1","sha1":"726ab602ef7c82c9db251ac2a8dbdd142a28cedd","sha256":"e9bbd35f8b3d2bd962d3811c39e4cf82d2448f40576bf0e2fc495f5231b2cd1b","sha512":"b17c2fbeb47ae4e82b2e4b65e0874d54bfe07636406d4d56c25df1af1ee331f298538b63766cb21fa96cad217f86c61c2a1a3baee117ceb992c194d80ee87513","ssdeep":"","tlshash":"10f0e9e8e0b48a583948712c1b1c28952e3b32330dd18a39306be32e1f1254673cb659","first_seen":"2025-07-08T10:50:27.692829Z","last_seen":"2026-08-12T08:19:42.814562Z","times_seen":1826,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":50,"dns":37,"connect":4,"send":0,"wait":92,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/pageBuilder/homepage.json?v=04/21/2026-12:12","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /pageBuilder/homepage.json?v=04/21/2026-12:12 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/tr/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 727\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AiSekQZWjHCEuUIu04MTM5hsrqAnL0quGjQ2Hdtpk83DsCV4V4S%2BKXxp3POOXdeNdhVVfdvBYEiJkWnGwwXTyq%2B2zwzBwNpO0YyTEJZ%2By5RyopGuqnBEQb6hweinWab6hYk53A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d019d0a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3256,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5d9aa04763f90c3bd14a8fd480a373ed","sha1":"c2a1f628ce9dd4e1a45bde09078734d6a0fa1fc8","sha256":"c2cb5092a1418c559ced37d96e123488212dc49cf4e06ff2bc550d6cb58e6238","sha512":"cee2d53fbfc6edb5f50c34c612cf0f51efeee37e8b3b6cb4585610437bae09103f870534bc9bd6e631cee74f435a1f72eea4ba5d55d49933790d606ab0b18b55","ssdeep":"","tlshash":"2861d23d6800edf8f3608733d2822b815a99c979d784495c5cedda1992fe2da0584fbf","first_seen":"2026-04-21T19:21:58.181444Z","last_seen":"2026-05-14T23:49:57.400645Z","times_seen":20,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/4d3d5ee375d90298f1e19b551ce6cb99_casinoGameIcon3.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/4d3d5ee375d90298f1e19b551ce6cb99_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29856\r\nserver: cloudflare\r\nlast-modified: Fri, 08 May 2026 10:39:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69fdbd49-74a0\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=6tQmQbt2zgofNO77dg3EwdCaZmB_yd9iIqlv9ALY1xA-1778590246.2060409-1.0.1.1-vfQhCnhQNnWP8d_bDrqwI3r2RJJp7ORLGlw_3lA09c.UeaPBoJovNDXouWQXAMiwA09Wik7d21wEP8N.9ZGrnb48TEWBzLRLveHUDwkqgzDF5IZdc7Kjmvk82P.ykBUc; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1UvbnFEEYzmnX7RNOJsw39MJmyclzHt6EFaSynEzO21P%2FGusWIZTaH%2FkLwL8XFTfEKmHDcMLWydcyaspIHs1khoGimeouGoVCWWjQjcxOQv0YNYBHhUFKlg7zIoaUxREtrYV%2BkaqK78%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0ecbdc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":29856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c67162ac024e9a531f4cc88916ba0cef","sha1":"1514409d3befeab43252ac28bcefa8ce64e6547a","sha256":"1dd833c5f51b2a03e701ab9f250da54812dd1a8c7ae413cac63603af5739b112","sha512":"b7a61cd09da49fdcca9466c435693d2fc5f58a2d85676a6f8b71c9f2d8d7a090742fc0f0e890459a7a26521e154cd36ce95e485d200f112b615000a98c39bf7b","ssdeep":"768:igoIxngJrJp89jDGjhFb2nSnPNCoUEpisD:WIxyNpUJICozpZD","tlshash":"f6d2f1778e60f69b94026ff1518f00f81df461e21c1b975dab8aee6b89f4152cb46b03","first_seen":"2026-05-12T12:51:51.246153Z","last_seen":"2026-05-12T12:51:51.246153Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/GameSuggestedEventsWidget-CXy_rPw2.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget-CXy_rPw2.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1694\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BSjyE1Qt86uo2vZHvnb%2FCPyXXZGsaHIn26sJ9juJ3x1sOeIHoMEDrdtw1eKn2EWv6qt5REnCV%2FhibGzJ0qo2Adu1gmSldcOQ%2BrRMg7xRhT5qRiw5bF3OZGgoZwhVjigAC0G%2B7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d021d1e56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3710,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3708), with CRLF line terminators","md5":"291b25d43c6fdaaeafdb4eaf2f21bb04","sha1":"5c67e6a42e2bcaf3c382c2563b452b061506185a","sha256":"8875b2abd4f21d5af947e12ef3c296a1455aa27d76706fc2b450479b254c9185","sha512":"a694796c3aff7e14959f2dbc3fad8e6973c2463e87554b8c9da3d0d7ee404e0621d56ed5a8bcd3c1c5598603bcae393ae3cf5fda5fa1c5e61de8658b3f3aa9ae","ssdeep":"","tlshash":"6071e856e010aa39917341d82bef321814363278b94393c1b63fca3133e51926b6a7df","first_seen":"2026-04-30T19:32:29.795963Z","last_seen":"2026-05-14T23:49:57.356203Z","times_seen":6,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/Odometer-CVXFbm9Z.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/Odometer-CVXFbm9Z.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/JackpotPoolsWidgetContainer-BUz-kRPc.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5481\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUorPYih4K6Yup8ZYtsmJJG8uu0rlasHatwtyUYJbB8jr92P1WWEJDaDPEFQzt50oke9w0%2BQSeQ3f2EawwTOAfZdjr5cunkBNXXJulGGaWKh0dCcrjRD7Y1Ce8ZcruYb1whyhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d062d8856c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15625,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15623), with CRLF line terminators","md5":"363099a7aa80b08adbcb4fa6a5c235b8","sha1":"5df01cf115d0dacefc09e501630edbebb41eb84e","sha256":"fb3c5f2d67d192d60ace689027fafe68e0f2625283ce35c94499366b80600157","sha512":"e73d4427fa035d5895dcf0d088df617d1df84f70b05a7ef046075ffd8c8bcb2a9a36ed0efd3dbd049ed1cb37f50f3dade4d202c05d84e5b7f309fdfe59025fbb","ssdeep":"192:uAd7+NJtQaM1S0KCL529Xskmkjm6H/I7kauLPH7BNeSYpkYaSBpC7Tl+ea4PFG:iVQaM19K0khm6m6H/LPyFtX3HeNPw","tlshash":"45622a89752272344393b2a055bb0609773e5d6a3809405db67caedabe32c19d12bff1","first_seen":"2026-04-30T19:32:29.722128Z","last_seen":"2026-05-14T23:49:57.372946Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/CasinoJackpot-CNQNWl4L.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/CasinoJackpot-CNQNWl4L.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/JackpotPoolsWidgetContainer-BUz-kRPc.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8909\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tH%2FGGvHY0rNXsQh0ifMBQhZ3y1tetG1AMfHdFUWsWk8wd%2FmMTQZJGfLWzXtQnGYj9c0CJDLeGZFW%2Bn51G8mInS7cdGZLXxuxAV6okvwM4kWwiFOIuc5Ab%2F5%2FiT7sn8a%2FRd4J0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d062d8a56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14340,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14338), with CRLF line terminators","md5":"f05c92cebcc6128b6ce04f8f9183b6a7","sha1":"a8d7997f5441d86c3b2c9fc4d49a4e08f126406e","sha256":"6195afef82d1ca888e96d2b48afd9550af5ab3e31a261ccc2ceec0ce87d9dc1d","sha512":"4d63d5d0b81a0563aef4cfe3c1acf8171d6d93fb1f780e3066f8062a06f9e84e3dbd8194c55ed7f65fdcc368fb5cd1c64ae807c642461808aed2b6ce44c685bd","ssdeep":"384:VWm6srKqqF3EjFOFEGOpOpeHMtGRxeG/PcyKx29boP8FJdO:VWmB7CEGOpyts/U2bdO","tlshash":"a8525d05f012b7edbca954f7487ee0287a5e1aa9c71808bcd1bd6c313d2c855760b7ac","first_seen":"2026-04-30T19:32:29.89895Z","last_seen":"2026-05-14T23:49:57.375718Z","times_seen":6,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/FavoriteGamesContent-CvJnpx-t.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-CvJnpx-t.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1197\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUZhNlZb4QZfyIce0LdqbD8bSaHQhayXi%2FnA87%2BN3ELaAXM6NTi34lW1oSO%2Bet1I6E6JJNcDXX9EGLP6N8ioP56bt2tk73rbu6fT8Du07dck6X8jOzuOOqa4nLIrEZDYXuissA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d082daa56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2787,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1707), with CRLF line terminators","md5":"5df5255826aaca0674deeaa943c3d10e","sha1":"bf214f4f97aad9080d8f606a06a4367c4b1a9984","sha256":"e2a465139a450c2bff6ff7ef41d3ab40b31ea3f13231047f111d6b297057a7d6","sha512":"a3812bd97343f15e0cd9ed3340a0ad232ede1cc3f4f83d7d1980a9cda00345d45ed062875ae62cb21f4ed51e70118d16c3d9de1f9dad6846f3a7ac9e13ebb73b","ssdeep":"","tlshash":"d051831040445ff8ab9eade61f27c0540966038c6241c17e69795e3d3429a41723bffa","first_seen":"2026-04-30T19:32:29.757983Z","last_seen":"2026-05-14T23:49:57.34771Z","times_seen":6,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/e46fd7a1cc03379cbe1815c941cc63b1_casinoGameIcon3.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/e46fd7a1cc03379cbe1815c941cc63b1_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26306\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Feb 2026 12:05:15 GMT\r\npriority: u=4,i=?0\r\netag: \"6984877b-66c2\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=9RC4XuzHUazJaoFJSY3Twq4T4Othtuo8tE2Dod7nQbY-1778590246.2063012-1.0.1.1-RSvopvEAtIP4sjgL34OR09veD0LXP4kmeMXsVuAMcNRtZ7okKtytSoURwdHOOuDNZ_nj_NgqGiF2R1YiTCkWS9LdNLTULYVRp.GcyJXtGZosiiLEzeZAHqefp098Ogrr; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKpdQtOZPR1izEiLZl%2B1szlXC8fYel4NQ1eO02gLscuXf9QPzZ8mCkajz7kaWMuHUvmF2iOPpbA081EBwme4hnM6OMl547cH8NTThxm%2FXjLqdhlVPlsG2U3P8Mjf4P36zwnuUvRdBDA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0ecbde76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26306,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a40d2693275f9882142e2124d7c62c52","sha1":"8305919c083bf4d8f3f2b16976fe08be4e5cfc24","sha256":"ca54aa5a91203065069603202e89541ee5968e99616013dc888c3fec66eddab8","sha512":"8e76e409d91b3157833c10c6ecb54f6417154c47eb78068845f6e224de42dd34a972ce0021079427e4dad587958e8c7b7974abd258ae57ddae660adc449697c3","ssdeep":"768:NY5D1Aae3YnRe1NVmNDX2X8gHmyu/9aH93TKjnZg:qF1HnRGNVGYFe/9aH9Gu","tlshash":"e3c2e060097da314aec9ced41586ca0db0cbfaa99cfbd0c735ea1ac4b8ada8d8145013","first_seen":"2026-05-12T12:51:51.247219Z","last_seen":"2026-08-06T03:28:21.70462Z","times_seen":3,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/LiveChatInc-Cwww7iu6.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/LiveChatInc-Cwww7iu6.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1250\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QXZtnAo0L9tXgHnp2TkkBUXDuMlWLkYCPugQ8%2B3xT4xWnRNyYhFfxDEBhqJZolRumqNkpOrP2B2aRQkhl5qfvdSztwPPgL9G02lBNsjLx7GrK6VOLBqwi0XsAG%2FOvnWfhL4bIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d022d2856c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3156,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3154), with CRLF line terminators","md5":"a55cb0c72b55ee77b205907d26c6a209","sha1":"b64bcd8e422fdbf5c3a71d43f36ac655c3cf97fc","sha256":"c087e3b9f4493a6f8d40206452506dd1228437518dc65f906fe481abb27186dc","sha512":"4b1e74faabaa696e892c4110a1c36f7108da695e2cdbd13e0b9de8b1af5291caa0b89daa205e8ac0660d3d0c06545caf82a406cb0ba1282fb88ce4e3dfe6425d","ssdeep":"","tlshash":"0f5185ede07874b4a37927e6323b771f3215aa14a4484cf0367c4f166a4b58b8076e8a","first_seen":"2026-04-30T19:32:29.802432Z","last_seen":"2026-05-14T23:49:57.391145Z","times_seen":6,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1074.com/api/public/v1/tur/casino/partners/751/platforms/0/games?category=28\u0026limit=12","fqdn":"go-cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /api/public/v1/tur/casino/partners/751/platforms/0/games?category=28\u0026limit=12 HTTP/1.1\r\nHost: go-cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 1281\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=iwHxur4aemf_jBcYdgErLY2nRuvosdzqR1xIfw4oXaE-1778590244.6153147-1.0.1.1-SqeiaC6OcDrGgavzUPBSoNLyhIdeuZyA0iOcS7eev_MtbMyHS2ucls76vXWy4HsstfYibeDSUkD8wKcBeNyQR7.2d0r2bn1zjyKFIMKo0FoxbuNdsR0WSOCUQrW7qb1C; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nNfEuMOMt97HwzUi0BcPyQ%2F3BYnE9S6jQOuHzxfco0uUJWlbHAkIPSTVfj7Z9hyadvylZaXIMNWY5VYN6u4l5gRvAkr%2Bk2LJPkTrTz3ORs2yRmOx%2FilBPQuWLgZuboNS1vsm09BZZt51\"}]}\r\nserver: cloudflare\r\ncf-ray: 9fa98d04debab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6327,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"661aef3d35b20d637a49b3437b95bb49","sha1":"eebe359e16e0a625fef626cb70ef196e37689c80","sha256":"1d06ca4b1c083f94e2643a7835874aab4ec3b90bf9ee1dac2610500a1a301af0","sha512":"5c6b032ffc618222195a0163417d325875b77c8080d007d072b269ba62da85e1e7efe3758072fb108dc998d72ff4f2a0c09bd9e5f97cee1d35d978a5fdfe9169","ssdeep":"192:EpS4FvcY4FCOOX4FCMmMfbnWIFCX6XLORx4FCisSbnijiyX44FHFnbn+Vb4djdFU:U1oMoJjhz9bCUgdG","tlshash":"dbd1b24a0d34fadbbf9a0984b4863c4dd97e17c1778c7d50cd86994b60ea0e913322eb","first_seen":"2026-04-11T13:31:58.746534Z","last_seen":"2026-05-14T23:49:57.533279Z","times_seen":23,"resource_available":false,"data":null}},"time_used":7387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7386,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/RunningLine-D8CK8pTY.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/RunningLine-D8CK8pTY.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/CasinoTopWinnersWidget-Cp9RoxNY.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 567\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNmcM1JA5om3ACOD9vMDti8IJ7LbLBDtCAgqLyYe%2FnIF8EpbA55pkOI%2BbXA5zAfQLRZbtxLu8g9ijEubWXs6hwlVTCh0KsdpOX464Egy%2FCDV0Ou9zRMA11yPjFN2un%2Fhp7TnxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d061d8556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":995,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (993), with CRLF line terminators","md5":"051be86df563ede1d9b91f31b051189c","sha1":"5c86b79f8073b46282b39979eccd91ad87c76368","sha256":"a655ba06b8ae1af66260af28e440311c4bc59fcc746c0966d702a80ac83d0abf","sha512":"5c9f5c6648cce9b9ff82f4f0d59f33eee62bac2a25140ae0410e8b519410d83f06ef121d9a4411c923906c00ef6b0a26c0d5062c91d00b8ddbc4881efbfa9c4b","ssdeep":"","tlshash":"571102569011b5fccaab06c2b13e040c295701a5fe274da0e07e18552a29180bf37fb8","first_seen":"2026-04-30T19:32:29.751652Z","last_seen":"2026-05-14T23:49:57.478899Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/TabItem-CBgyJEAy.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/TabItem-CBgyJEAy.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/CasinoTopWinnersWidget-Cp9RoxNY.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 244\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IiEFySvhCG94%2FiN8B3kEtsqmvIgqZ%2FHRZPEm9wcLIiywZR7Fc37uRON3LftBFC%2BXdinmuCETh9BJO2kbEEOQkcDa8SDk6hrAq%2BQDDNL8F8uC2I9q%2F5kC2olk6%2F4OhOUpktsUxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d061d8656c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":424,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (422), with CRLF line terminators","md5":"006315b1619ca2748ac3d5e66519219b","sha1":"6c3a32e0471cefebb7251b9bd5b32dcef39d3284","sha256":"6ecd2a161d8c7f3bbd34952d45890e770154110cca07b57f207839f3d1a0a6ed","sha512":"3541d01c403ebf5d686c2bb70963c8149882a3788c59d4958075dc4325cf500f3be081e546ccf268f4da6adc3ec76175472ecaf9fbf662c31c03d88bddb11925","ssdeep":"","tlshash":"ece0ab52b010f3f9982b44c2d27ed4c736120ddcdaa688e1e0a22044432e521f78ff8e","first_seen":"2026-04-30T19:32:29.909004Z","last_seen":"2026-05-14T23:49:57.337328Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/CasinoJackpotPools-oN0RIPj0.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/CasinoJackpotPools-oN0RIPj0.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/JackpotPoolsWidgetContainer-BUz-kRPc.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 509\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x2zZ4W%2FZeaaQQ4yN6%2F43%2BwxSBpDVUO5irkfejP8f9KAdS%2FlnS02AdYj2XlkU4Oh3e8jyvcFgUKeaULiswmYmps1HaiAjB4Ixow0h%2BKT9LGXtZtkuEuneAMo86l%2BUaJVg7txVEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d062d8b56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":941,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (939), with CRLF line terminators","md5":"cf1cd20992193f4d7c1d2769bdebe157","sha1":"9f0328ed65111fe9ccd1e0730fd650d1b08e9026","sha256":"eb42d74aaf4732529c41541a793c5d7c0a8fbf4e207e6d230e2f4285391f6ea4","sha512":"98bceae736ac34380ddcdf2e6638efc8ebb08baef5d46db29a0b6323da354255fc92e7e8fbf808f21f46739de5136a80791b4e67974b703742c9e8215524a589","ssdeep":"","tlshash":"3f110e8bf02ae2f8d5dc08e080a4925b073e2f38f65042c0009c1a2d96b280af679b81","first_seen":"2026-04-30T19:32:29.798296Z","last_seen":"2026-05-14T23:49:57.448384Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/get-token.php","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:41.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /get-token.php HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-length: 879\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:41 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zVjY8HpD7KsJlsaskWQ5NKJaly9HNT5rqYuX%2BXzkV%2BzbqnSwSzhTzF0D1MH35010dR%2BGWHhP%2BkrPgHxfX9xu3yg3%2BFjB0XY8v0QeaG7LDDRmoty%2BbLGy4xmsoOMfjDsmwFNNoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98cf0dc2d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"526be005dd1ed7eecc50f078692072dd","sha1":"98174b321b261f173b99a7bd02702cb2928dcd5a","sha256":"300a28d38f049adebe137b6b88f1eafa4046cd6ecb3df71bc14c7fab173786e0","sha512":"c78259ffa423b78794d33e4c9d362a802519f377e8d33a4cfaef17c8e0406ada6356f13035868d5c80ce6e7648fd4d40c79f95ca92099b34e64a2d26420d69e5","ssdeep":"","tlshash":"0021c6116c2800c03c49d9c3bf46056dd29754cc943ae67e79e8c9d7442500acfa36a1","first_seen":"2026-05-12T12:51:51.250253Z","last_seen":"2026-05-12T12:51:51.250253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1074.com/api/public/v1/tur/casino/partners/751/platforms/0/games?category=406\u0026limit=12","fqdn":"go-cms.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /api/public/v1/tur/casino/partners/751/platforms/0/games?category=406\u0026limit=12 HTTP/1.1\r\nHost: go-cms.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 1261\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=B1qwlJLNsZp6vsfEj8wOloPTJ10IDUq5ZuxGMFeQLN4-1778590244.6158752-1.0.1.1-oyQe_nbVP39IC7btCBYew3eao5MTK05v8Lm2GqdXIWzmw5DxKCDpJhdQaY0OPvduiQ81m6ave.a_wJdOdeBEDG8WUAYXYteWIyHDzzMIBPcnMY_qbQKAbhEt7xXK88lE; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nfGs3rtK%2BHFXbqR5Y%2FqKZ2eSeRxszNZEjdJ3jBoQRUwA498%2FuHkwfJDH0kkawoZLPSf0yAyuFAUeEDUcJY%2Frn0%2BCHq1mYi7AZSUN3E7C%2BWoCqy1fAo3QODsqbwaUCo60Udu%2FSxbpkE90\"}]}\r\nserver: cloudflare\r\ncf-ray: 9fa98d04debcb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5898,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2386db18bf5adb821124f10f5e8aac63","sha1":"a44c129cb48b1f6bddde387fcc7f1f57732dadce","sha256":"b4995e2cee91588c9d08f78c7dc78a04aaeb82c2de15d1cb4e923d4ad7868cad","sha512":"4be7432bf379059b9551952c00f6b3f40bcca808bb54ec4f39894ff39ad4a38a1dbe11443b7a182aa0dd6ea26a2dcb8d071a32964909c071359c947d8ee82cf9","ssdeep":"96:Eg1PCE1eZUqqqiacabUzx01pM1wcwBEnU6M1e3ef15fYYvxj1PnPD:Eg1Pn1eZUnlFUUzm1pM1jvnU6M1kG15N","tlshash":"fbc1cc4a5d34f6efbb590a8074533d0d98bd53c2aa8d7d108c8b994e60e90e527722ef","first_seen":"2026-05-12T12:51:51.251739Z","last_seen":"2026-05-12T17:10:48.531176Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/UnavailableMarketEvent-DRNaHNkz.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/UnavailableMarketEvent-DRNaHNkz.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/FeaturedGames-CW2_S--l.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 179\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFIATRQkwGJ7oKGxE1sm%2BOCWk6mavWtNrzcbdwgk3LDvH7LfDl1aUrhnt478EEv52rJ0Ve7sB1Zl6xHyVRnJqMEZ24JFOSBiORMYvjBVxzvEk8cQ2OY8gtpdvGgudQxsT4S%2BOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d06ed9c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (307), with CRLF line terminators","md5":"cb2457d309aada0d78eff12d339e782c","sha1":"c58528547f1191917c5d6fb496c75f56a10dfcca","sha256":"9e251ffab01f3eba419fc34cf9dffbb417b4fc56651dd8d06b1adc5270c29645","sha512":"2871e687a6b1d44ed141f560cd410278e8fa6ed8badab7cb9c0919a0ad0892c3eb26f30d8818dc84694d3c7dc7b87ce78795ce6431f1f7d71ff5f24b27ce5cc3","ssdeep":"","tlshash":"ece07d0db044bffac0251cc8ce3d8b0d600307b8c7e945c391a920282b34235360ae9a","first_seen":"2026-04-30T19:32:29.782979Z","last_seen":"2026-05-14T23:49:57.395432Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/storage/medias/galabet10/content_751_255218c8ce749fe8c9dfbc0b8e8ed1ce.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_255218c8ce749fe8c9dfbc0b8e8ed1ce.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18246\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Oct 2024 12:46:00 GMT\r\npriority: u=4,i=?0\r\netag: \"66fbef08-4746\"\r\nexpires: Tue, 19 May 2026 12:50:45 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TeT1c7h16x5YWeixyw7IUvh0E6HOlDWhYyOS0gcthbKcYjUM535n1tyjfYkR4SXT%2FVR4y7ok2TOg9U5BjFWe6yM3Rw5gZ8MHzEQsJPnEqg5MicVoNH2Vzza6BgEgG1vUn%2FbzNnutW9w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c2b9f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64a87f03ae635843aa9ddf8b795ef059","sha1":"820acaed7c185030663567efd9b9b0d820c10b2e","sha256":"eb987fab4dbb8a68ec1dac3374ab8d34c1d24e192526bfa17f415a67957094e3","sha512":"881a3d458f5189ed68310367aa0b7c4e4e51df4bb58d942b9f7c3e06a66010f735b9b0161f80028adb1c92cfc2e3df3b4760e69b0df6d84850877c60c7307373","ssdeep":"384:MTMTJfN/dyUK351WMwsPAv4eN/lz2T6zfdhXeVZA4BWDYWTsVfAEsTTQ:9Tj/NTFAeN/RG6zlIVZAkWDYWwVzgU","tlshash":"c682d037039a424351b7142fccaa7d52a4d0097b8a2be67a0d5903a54a3f7398bdf67c","first_seen":"2025-12-24T22:39:16.361229Z","last_seen":"2026-07-06T22:32:46.875398Z","times_seen":56,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.galabet1074.com/images/e/s/0/938.png","fqdn":"statistics.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /images/e/s/0/938.png HTTP/1.1\r\nHost: statistics.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=sMHRbwwJRIxkt8kSkPb86oO9fEhiGz1UFdYVAEkmTF4-1778590245.4869423-1.0.1.1-H9yAwMVEWjBd5wEP9yHiiEhfJoB.rzU9rcwu4IY4_FvB2k0Fiq_apJWyW_gMrVGtqvCA0ajGiyzcAqbcnE9s3.fXYIVvDLQIKjc.j2gi4MBokIgOgWggcwMOPMGqtvKE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1814\r\nserver: cloudflare\r\nlast-modified: Thu, 03 May 2018 07:24:47 GMT\r\netag: \"e916cbd0afe2d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 10 Jun 2026 21:34:49 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 54956\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Agkznlt3k0mfh8M7vTCOs5no%2FQ3TSoJoZUA8y7SrwLRnM2oReH5pxkhbrZaURl6to3rc1rM44GO8772Kzc3e0gsABdEpvR9dVBw8vBjfQxOKtDSz7Iyk5ZRcwPIUh7lcdAvroX7eeLoRSUxx4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0c7e07120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"077787812d05a2ad4a3117de33a9e772","sha1":"f1c0053371515b5a0b95c492157969174e0808ff","sha256":"2f2731e1828c21298b0698dd905412dac6e22b165514a28d6078fe058700fd08","sha512":"246a55e5bf1fe564b124169b4d3b97500e6b383a1a9e01160fcd69ed6f8b192456e973008a6db5789d5e78da151599c2a5a59a8d2bf1f57b8fedabbb4f92ea91","ssdeep":"","tlshash":"6431c9faeb2c3da8030944eed7d6c6cbdb01646c4cc28c7465a880a51f9479898479af","first_seen":"2023-12-19T15:28:04Z","last_seen":"2026-05-22T22:07:06.194644Z","times_seen":38,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":13,"connect":15,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/Popular.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/Popular.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=iwO9axOCmc2S81SJkXPE_V89dKa.aOir430hh5B.joU-1778590244.131043-1.0.1.1-6d9Uwn3xgWC88ckDC9uPX_YPERWxyhgjzIsC724PF1ACEZU07QTKf9mLDsH4OuMxUot9O3yy9ZOhOrjHVidcYViT5dY0oulijEaSN1V863twDji5MAAmmHfzOI2dbSy2; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cuBQx4N%2FlaC9anOLqJyfv%2B6TSAkQrAXj%2FbCpJVZLN%2BSmUFgb8wuDxaULa2rc88m3wWiSwYeGYW7XD9C8%2BwSFM30MVHDD0ZekMsi3a2k65EoVAUzPU0%2FKybaYpbI1gz9rWvXat7fWfTU%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"6862713b-6b3\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01cae8b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1715,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c5f467071e8144988f2ffda2539a7fc1","sha1":"8a2e6953f7f16e38d2c4fa1273ddc217cd623d5f","sha256":"c8979e47d3d8b0c74956b41914c9b7628b362e6013d9f040fce1ea2219e64857","sha512":"1e58d1f9a594b6d9b0e3968c137216904a37abef225ebf00b88d6764df8c8ff0226f5f6307a23e48944071bdc36ed786297968db893be66cf7ddca778015e6c3","ssdeep":"","tlshash":"463110e8da56ebf43c54a30ef7386cf13157085b78d38224052f1e8a23dd519afa8862","first_seen":"2025-10-26T18:38:27.855792Z","last_seen":"2026-08-03T17:16:44.669007Z","times_seen":70,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/svg/GamesOfTheWeek.json","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /svg/GamesOfTheWeek.json HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Gt7uJDbfLq5gUKc6Hw8pQlOZEIT9ocfiA5t927oUL8w-1778590244.1333578-1.0.1.1-zQoZVRoj2RWLrPyXEXVgggD7Chooc2kM7s9VsMALLRht.tO.749fotfEh.yiCHLynYK8YYr71NGhOP8J5hinGE1oR.Mk5.ChFk.xUrS6xidIRfo2SrQgwXM4pnw9s.fr; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FnauEDLpz3Ir59CjtnqbkxckcPZb%2F5lqADc9BN0hKE4AkhbuIS0DhMjbeE73UfkiubMIjdZLIR9CV1%2BTZEDdfROtnP%2FUnrkc62f6%2F51%2FRQMJ4aoKXYPxCD4nlkPmrIxK4YObTQjllik%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627086-be0\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d01caf5b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bd48bcac13b7af9a43338fa39450069c","sha1":"b39e0dce82eec16651566913e7d8a1ae26ee25d8","sha256":"e67476d135f1d3e566d62c017b8a4afa7b3013dc29540a85de3c9f071a11812a","sha512":"39c26cb74b8bea9fd071edc07b5fe1ef144747ebd23593b409aeb8f0e6894daf00a946805f222e2dca66dae48baa4adab0196a4ef71720fd109aeba8f11e1026","ssdeep":"","tlshash":"6951b0d8c5254afa1bcc335e6322542b0cc92fd6f7a35cd8b27c85985b13d062a7e883","first_seen":"2026-02-24T14:23:51.265611Z","last_seen":"2026-07-13T02:25:32.274163Z","times_seen":54,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/AppSettingsButton-DUXAWyLU.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/AppSettingsButton-DUXAWyLU.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 259\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gqtl85TFKo9kEY8u9pjtEClqThA0BuiNcU4tcafthe7Rwz2n6JkoQ%2FZLc4RpT8683greEFm%2B1myYtWQMDhBuythQ7u%2BAyBgf1niLufFdphOsTTa6TgY%2BNsyJUMphhznP7dAmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d022d3056c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (384), with CRLF line terminators","md5":"7dc6a01a893c34a75e817f6a146527a7","sha1":"c1508cfd72de79f9ec6e7410de3069045e969b1f","sha256":"54960c5461d7c66aba31a344c54b5f248eee62133bb065ba8e24534cf4243f1a","sha512":"d1ea3f97feac40411a749ac6f282f5cbe3d29c7db0b54dc4dca77ccce3669544cf7bfaa25e7711e1e93af9cb0e68ca471a1d95791a9300765094b025575840a6","ssdeep":"","tlshash":"fae0c08790c1d3fe03d12ec1d60bc1053d166c7cc788a95240acb4617af41c6855f62b","first_seen":"2026-04-30T19:32:29.896626Z","last_seen":"2026-05-14T23:49:57.356702Z","times_seen":6,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=bc48296","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 06:34:08 GMT","end":"Tue, 23 Jun 2026 07:34:07 GMT"},"fingerprint":{"sha1":"6A:FF:CB:88:7D:2C:21:DB:DF:9C:CE:23:37:4F:33:97:B2:66:83:F9","sha256":"D6:89:30:57:7F:09:DC:DF:2F:F6:56:BD:C5:FA:DD:99:4A:6D:A6:D6:C0:95:94:F2:71:EA:ED:8B:67:DB:6D:46"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-chunk-vendors.js?v=bc48296 HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 14 Apr 2026 15:09:36 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: CNXe3DU2FEFHgpmxoo2VSt9O8EMF60CQ\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77nRAuDgXK00DvI%2FYObDZopjTiFyWkTlWDKGkPaxOLEZLp2BKllbHzsZZ%2FSdy9QGqd93hd9nha2bWORe3TmzBfQCpyP078Rs04nAimdwtZbgtq01jLcH4Dm%2BhW2gOw3xpDCUaCLGo0ef%2B7JfQxwh16I%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6a7eeeb375db56eafe74d447721ccbb8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: DvTuLPm-1pXzlMCQscvib7zomLMOeKd66lF02ogexp-awnCDgswptg==\r\nage: 321\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"914072ababccf9be7ab6560f2b73e2b8\"\r\ncontent-encoding: br\r\ncf-ray: 9fa98d0ada39723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1880992,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37482)","md5":"41bcf3994977bec18423a587b438b268","sha1":"8b66545e760f6ab346da42a36d769f6c1e1f387d","sha256":"e600ad1285d12e6f25a35071bb80098a246a2407a358a3d5e3d1c2b8b77e5890","sha512":"62ffc012eeac28c0a184c17323f4c69781f7ca31cfbd628a7eb14270ff09d1d0af3a3488c81d04accbae12be4a8fb0979bda1274c182875a41c02e8de32c3998","ssdeep":"12288:+iV5uogEvtEvvEvtEv1dgHg9quyqXjb7EqGDeuPqK3c8WsIJyZmoJwCFaFIFSAJV:puowdgHgfyqXEZFJTIPgKzYJRX","tlshash":"3c35a488299ff7500557e0e7e02b1d08d22eca35f847a440dfa2dbb36ab2356d36de15","first_seen":"2026-04-17T00:47:10.183616Z","last_seen":"2026-05-30T03:19:40.274402Z","times_seen":11,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":67,"dns":3,"connect":3,"send":0,"wait":46,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-12T12:50:40.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; path=/; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAdJt42n7PP%2FrgoncXcsCyK1j8QWo0z%2BDrA6i7rmU%2FMSFfPGTnkwbF%2FFCXYLNhQqEf3iKdzRRrSmeJHJZZm88%2BUKrkO7MWUDNzRY45UQQ0RsNS1GHleacXp3nUsJEPzZj%2Bl6DA%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fa98ced6945569d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]}],"data":{"size":15804,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (672), with CRLF, LF line terminators","md5":"57a17130ac950c558bf8f5450e3d8b4f","sha1":"243e1236786d7c8e87ed113075f11204f207d94a","sha256":"8df6c557766d48f5558371d543eff20d40456380f7c7ab475f8a504bad363fff","sha512":"173c9b37f2b5b7e9073f77ba9b9dcd7b4ed38b07721263a499bd92b4ac37711e97077ca07a3d2dd59933e99a5fddf86ea1814d9522a5345a84484e07ef0a6336","ssdeep":"192:EmZ2jYauRe95Tf6S3r6H2aH0oBmz9+F0MOQ63mTeZFyOQb/aiSm5erJrDt7RYIjm:EmZ2jJTfhrtoBS4rIPIj/y9oIy0I","tlshash":"8862c79b7940a0350273737aab7be408fe36a11745029aa1b8dcd5663f70e544ab3fcd","first_seen":"2026-05-12T12:51:51.256956Z","last_seen":"2026-05-12T17:10:48.672517Z","times_seen":4,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":48,"dns":32,"connect":1,"send":0,"wait":392,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/custom.css","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:41.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /custom.css HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: no-store\r\ncontent-length: 4531\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 12 May 2026 12:50:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ubNwFM7%2B26D2FSuUJT%2FdWycDltcu%2FzZ3Mt6pWhq8o0uKI4efGrRqG2JBNzWef8dpBuq9%2FsG%2BqVCk2o%2BhMC0GqWlgtd5Avbq98UDXUCzOtRsdA5F3CO0OzjfLCUyViqbuhdzppQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9fa98cf0cc2956c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18161,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"d8064711b4ad1790174b53d0c2663f43","sha1":"a30a8b677ae8d30aa1f387d6ac29fd50e36c6a4e","sha256":"7f0bd8e6a5a8e3e4f69fb3ed7048dcb88c3cc15acf6063465e5722b8f2960f7d","sha512":"d9518850916de2dbf9eb570a3ce72ac64a3b32808dbf88a26108946f71f49a37205f643f70121b75993dea57f5b30ead31f6688b08b7af86e444a46a620b9ef4","ssdeep":"192:52SyYVVLN2Ns2hamJqKbEiExkouE20dX62UYx6lY9qywNKVh4P02pHnN1eXYMVYZ:wYUrhaJCW6jLpHP5D/","tlshash":"b282a653fae31989716b81986a67b3fc7e7d404387098d787b94b3748f877e28431a48","first_seen":"2026-04-23T13:40:26.011765Z","last_seen":"2026-05-14T23:49:57.338672Z","times_seen":17,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.30btcoservice.com/?type=json","fqdn":"geoapi.30btcoservice.com","domain":"30btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:42.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"30btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 09:12:29 GMT","end":"Wed, 24 Jun 2026 10:12:27 GMT"},"fingerprint":{"sha1":"B9:1F:75:76:BC:B9:7B:E9:F6:0F:E1:CF:47:1E:70:58:3D:CE:72:DA","sha256":"98:10:14:28:C2:C0:43:49:EF:BB:28:85:FD:58:58:F1:2F:F9:10:20:89:24:83:E2:40:E7:73:03:FC:A4:08:D4"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.30btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galabetl075.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 12:50:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bs6CHE7G7ZsesKjlQUj2%2B5D9ALiJKQvpIgXTl4VUzIrujE2m1MLYQNfWRvS8Sn42%2BXO6PYswVObgcrKYwyqrGrSMjjMsokFN3GDf8qgFH7XVV1U07um08d9dLSF4cF8eoiLGgCFoh18Ok94%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=yf6kNLExzVBb6sMvSF4fHtSSGVUBmioTB2AZPm44_8c-1778590242.9114895-1.0.1.1-UY1jo0Zx7r5LbbHVG3QIWNva30wj3oumEXL5wS8ZbnDXGe4UnjFt.7CdWmFr4tFi0PAMK1sy8u3Gy6Uzd8rcK.WZT4117EaJYsWDJLMEVSuDowZnrWt_KU3HdSc9TGRy; HttpOnly; SameSite=None; Secure; Path=/; Domain=30btcoservice.com; Expires=Tue, 12 May 2026 13:20:42 GMT\r\ncontent-encoding: br\r\ncf-ray: 9fa98cfa3af732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-06-06T07:02:31.879116Z","times_seen":186,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":92,"dns":75,"connect":1,"send":0,"wait":79,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/GoogleTagManagerTracking-DZhctjBO.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/GoogleTagManagerTracking-DZhctjBO.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galabetl075.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:10:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4845\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NlfnC%2BMzN4WTwRxHnEhmvNnyDn%2Fpa%2Bi1Cv0f1IHmkLYeXNPbZwuGsE%2FKVx%2BlF1qRSlKGtPykSGDNqrBi%2FDsUrfj8NHU%2Bb7uYLeUUbjsvMOSJMWpCBTVgw3csnOIBoDKqQoqIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d021d2456c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21780,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20471), with CRLF line terminators","md5":"a9ed68d341df84dc333867860592c7bd","sha1":"8d63b948bc8f948e11a6b3830bc574591c1ad756","sha256":"32658a08b026183b6b6f8a0258c12a7cbe735372fda058bf0af2bcd53295bac3","sha512":"5926e946eef0649e707db5a9752541656915c6a73dac8be19defdfb51eafd187322daa782739d257bb3b94ed7de100d7ca607ae4c9d638e55ca186834a8151e0","ssdeep":"384:B30HgCB901PDVPAZ9e5mze5giWVyoxJUJF+FOndK3pqyuQNJg1F0TQOmhNwizwTO:d0AaqtAZ9eo6SiWVyov8MFOndKqyuQNC","tlshash":"00a2bac7f9a548a0b5bd1fe81fc2528635b1b65af49144707c9e7c0c223cc4ef2b5aa9","first_seen":"2026-04-30T19:32:29.854425Z","last_seen":"2026-05-14T23:49:57.363459Z","times_seen":6,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Lato:400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 12 May 2026 12:50:46 GMT\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ae317c913d9f17e384174fcac1e95f49","sha1":"97048ceeff296795e17fc282e38d26d44fce8bad","sha256":"0250efe84de4fea78b47bed1e3367687b72cbad25fa556879acfd9adf33f6b24","sha512":"3be7c2d8b49c8ecfd8fbe46e0e57aec92fe696894da6243f6b9f0052461f28eaff9b6974068276cde565287efe54a8a16379b21a522dfaaad925fa38215bfcc5","ssdeep":"","tlshash":"ee41ce92096fb908db830cc212c97d32ef0f625064499935afff14d8bca7d699362b0d","first_seen":"2025-09-17T17:57:20.126253Z","last_seen":"2026-08-12T22:24:44.697742Z","times_seen":7584,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":104,"dns":1,"connect":21,"send":0,"wait":18,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1074.com/content/images/casino/icon3/d238dfb6edf99cd4098c44af7039a91b_casinoGameIcon3.webp","fqdn":"icons.galabet1074.com","domain":"galabet1074.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:46.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1074.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 10:28:37 GMT","end":"Wed, 22 Jul 2026 11:28:34 GMT"},"fingerprint":{"sha1":"F1:02:D0:85:E5:F8:DE:04:89:B4:C6:E5:AE:F3:78:11:6C:A9:86:C7","sha256":"B4:28:25:41:33:8B:59:75:E5:2C:7A:73:A4:01:09:8B:F0:E4:41:20:03:34:A5:FA:B9:BD:07:A7:BB:BE:79:20"}}},"request":{"raw":"GET /content/images/casino/icon3/d238dfb6edf99cd4098c44af7039a91b_casinoGameIcon3.webp HTTP/1.1\r\nHost: icons.galabet1074.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/\r\nCookie: __cf_bm=iRPeY0Oc0xVfv_u9dCUYQXT2CKu.yFg1dDBvbiVNpE4-1778590246-1.0.1.1-mkwmOPXVhXN5dsk22axxCOHZ02_ywNE6rqw.M0RnbsG72_UsbUVi5XgRZJlvvg1QIexAnIyY7wwBak7GMPSf414cEkj6ZC27tLE251pqHWo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 12:50:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15906\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Jan 2021 11:44:38 GMT\r\npriority: u=4,i=?0\r\netag: \"600574a6-3e22\"\r\nexpires: Tue, 19 May 2026 12:50:46 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=WNqQG0J9ZJ4WM6BHSOGdYLwWj3bd5W8Lx05PDKCy92w-1778590246.2073047-1.0.1.1-8lOhWs7OwDbZYhEKLLLeYrbpr5DEzxWb8eOC7Ej3Rpq5KNOo85pa4wF_R11dSLGRVLeyo4jnVimul87BRaHI98FGd78s6XIbis1ysbfA6W1iRwHts9FJI85puSfkH2yj; HttpOnly; SameSite=None; Secure; Path=/; Domain=galabet1074.com; Expires=Tue, 12 May 2026 13:20:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=clPkOwAue%2F412C5kbreUrRisZcgkbxQL57yVMb9ZM%2FSUhj2XW2IdZX2jW7IPIR0Rpp%2By6Gp8PjnqZGFwbZdEp4hba%2FcgqSIZ%2Bjddmrcf5XDvUeHFZj%2F0lLiN8s4D3D9fdFflFJIVWrU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa98d0ecbe576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":15906,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x310, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2f08af5565c126f6c0ec383133e1d06e","sha1":"4da277d868e9748645c72cac5f670a4ffe75d941","sha256":"28c618af72a368988dfd379bece0b6767fd48ddf7e3b5da1ef03d737db42de12","sha512":"7446b1e6769d432fae7711a8c899c8b920bce04ca90fcf7fbc00ded90951dc7dedb52244825246c5444071523c67878a558692c3e4da4d568a4560b6b3d007d2","ssdeep":"384:wLsBfAaMcOwASJkgpfuaGRTbBHaanpWi7RJI3nDP74:wiowFJksRG5FHXtXI3nDP74","tlshash":"c662d06868555bdf71798a49eacb4ca982acd43341c70f4d788fee482f4ae205d312bd","first_seen":"2026-05-12T12:51:51.259576Z","last_seen":"2026-05-12T14:21:59.672635Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/SystemBetCalculatorContainer-gFRshID3.js","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:44.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-gFRshID3.js HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index-Ds8oq4WI.js\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Apr 2026 09:11:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 448\r\ndate: Tue, 12 May 2026 12:50:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2tqwdzSaTr5%2Ft02MMw7DooBgAjwOTmtxiRHf%2FoUY5diM2oBdWag5KFFDudE36%2BBXe4ro0RgkC7AWMztcoPf%2Fp40rofOG3nlQ7lxFfyKbqeMiEK8EAWrrMOS9%2BeJdogbr0DaOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9fa98d022d2d56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":890,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (544), with CRLF line terminators","md5":"629601d82eaace15b01af40f48be406d","sha1":"136b5202e75a7a7b33a12e5b5c88f20ab58952e7","sha256":"91e8e66f4b6bef20214a9c81d459c66c05c015c9a1c506feefd9e005ededeed4","sha512":"8821dc48ba33c4d88df4754c209d861d49485a98a4f356c6d47432d4893a4b1b92c667408d504671a702c6c6546c30dc39ab052dc42052ed0678b936b8f0d477","ssdeep":"","tlshash":"ec11c0139754ce74c48a1ea20585a0500db1061c5a18f568b6f58c3cf0290d383ebfbb","first_seen":"2026-04-30T19:32:29.948573Z","last_seen":"2026-05-14T23:49:57.380567Z","times_seen":6,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/assets/index.6hr6LgI6.css","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:45.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /assets/index.6hr6LgI6.css HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/tr/\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Apr 2026 09:11:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 397\r\ndate: Tue, 12 May 2026 12:50:45 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ygIqBZu3mJSpuEqoJi%2BY6z2%2FETjXT%2B9lEBcETpCLWXl71%2FdgxMcRmhx8m5XMNIiIUr4Q6SAz8la1TRQUiE3Zq1UEa91v5mo%2FQPR9AZn9XZ2f4%2Bq8BC5B58b%2FU03Y2pwyVZ3auw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9fa98d081da556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1253,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1251), with CRLF line terminators","md5":"e5b0fe1a6ad36793f9809bff7b801b8d","sha1":"35368130c399303979f7c579e911d97058fdb138","sha256":"3c665f42cd405da2151b91762f121b5cdc701611c2cd6fc43fb8ff03bd05cd37","sha512":"04fa6c886870eb3c2425af3563dbf87f664b70c2af9c1a2fbede6d8cf47ebf76efa3dc8266c6323b0b357390137754d34e32e949bbe1107a82a300903ebd9774","ssdeep":"","tlshash":"e0218ad7190b14feba73a6bf454346ebe5238c5bce63114ab6c21729c4827a2422245c","first_seen":"2026-04-30T19:32:29.803853Z","last_seen":"2026-05-14T23:49:57.484433Z","times_seen":6,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabetl075.com/fonts/default/Roboto-RegularItalic.woff2?v=505","fqdn":"m.galabetl075.com","domain":"galabetl075.com","tld":"com"},"ip":{"addr":"172.67.141.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galabetl075.com/","date":"2026-05-12T12:50:47.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetl075.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:31:04 GMT","end":"Sun, 09 Aug 2026 11:31:03 GMT"},"fingerprint":{"sha1":"A0:64:D7:22:19:02:0B:10:BF:79:4B:EE:65:54:E2:F3:62:CA:E5:EA","sha256":"1B:46:F3:59:B4:AD:B5:5E:E1:B6:83:40:42:AF:54:D1:9D:B5:C4:96:54:79:C0:9A:F9:C2:23:B0:23:ED:C2:BF"}}},"request":{"raw":"GET /fonts/default/Roboto-RegularItalic.woff2?v=505 HTTP/1.1\r\nHost: m.galabetl075.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabetl075.com/assets/index.C0U6OaZb.css\r\nCookie: ci_session=e40e40f2944a7be649d1bdb20eedea61033c666e; _immortal|user-hash=oLZXRw3oIEX-jRvy3wUqrEE2d9VaWLvw_b8p; _ga_MCEY36CK22=GS2.1.s1778590245$o1$g0$t1778590245$j60$l0$h0; _ga=GA1.1.1624701396.1778590246\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 19 May 2026 12:50:43 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Apr 2026 09:03:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78564\r\ndate: Tue, 12 May 2026 12:50:47 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y52Tht1CSqxgs5aS%2FMuaVHiM9JPBKiRkcOaVtn%2FrGS6U1jKq9BZLqxG%2FEVR0P1QUmiBFXY8s9vIHZzlBa%2B357NjtAxJzPgXCGxoaCAxjAWZ6XbMnJKjmAFKRKPW%2BBxWQS34TLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa98d150e1656c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78564, version 1.0","md5":"ffa03f9099e16b1ed1a0158f01961b69","sha1":"f1b97110bb1dba1c8985b4c48fcc8f5c9cdb3e98","sha256":"84d373e980d8f7d376e80725c42737d1f76f34bdaff56575c866ffe61916263e","sha512":"e57c2b94d74e334cce5a9f880442efd3a3b90eb91b09b2384d3c2c109e087f51184a4a34d248ac980eee963d5dd4bf23f09d3032fa85310d925cbc2849d5199d","ssdeep":"1536:TzGsd78QYdAOQGSmGmOMz0En342rWzm4XAFVZ2lX8z31t6:TaQsAOjGmOw0EIq4iARqt6","tlshash":"f6731260bc8f5f5878b48e2c73ba52a89ff54c0824167356697ec6238f99344b24e74b","first_seen":"2026-04-10T06:10:39.548975Z","last_seen":"2026-08-11T20:15:29.063665Z","times_seen":374,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-12","alert":"Phishing Block","trigger":"m.galabetl075.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"m.galabetl075.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}