{"report_id":"37b3e074-b2d5-4573-b6b5-491a6df958c6","version":0,"status":"done","tags":[],"date":"2026-08-06T18:07:26Z","url":{"schema":"http","addr":"galabet.girisiguncel.vip/","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"galabet.girisiguncel.vip/","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"title":"Galabet Girişi Güncel","dom":{"size":13893,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (643)","md5":"5755a08c416907907767862fd8d87204","sha1":"9e88eedc1d4716bd944889a0a319c218eccf323f","sha256":"b1e46d9ae3b0f006cf7d79e2f05310e2f988df6900b72e9f860c1b606fba7fe2","sha512":"da20a9b102af9692cf26e57bde9ad05adc2416f24220a68ee0b15334e0debfa4d0f56e67c36d2fb52181e01b700038c266cca033a73e2b0472d3e4d09d646367","ssdeep":"192:QkcGrYeKGlBv/E3gCreavWP48kUg39CxeBSLhtZ2bbs3ONXb3Q:FY3GlBvcwCrZOPyUgsx06htMbbzNXbA","tlshash":"ca52d696a2f6742f077b82c797a71f2afedbd323d9225809335c8b650b95dc2958310c","dom_hash":"domhash4a7e080da7cf4d0f6c2f9025f80f09c3","first_seen":"2026-08-06T18:07:26.950972Z","last_seen":"2026-08-06T18:07:26.950972Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galabet.girisiguncel.vip/","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-10T18:07:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"galabet.girisiguncel.vip","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-08-01","domain_rank":0,"first_seen":"2026-08-06T12:38:26.27048Z","last_seen":"2026-08-06T12:38:26.27048Z","alert_count":18,"request_count":9,"received_data":105040,"sent_data":5118,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":5,"received_data":129248,"sent_data":2966,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nostatz.vip","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-03","domain_rank":0,"first_seen":"2026-07-04T12:10:09.883563Z","last_seen":"2026-08-06T00:31:25.790122Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":641,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":7500,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"galabet.girisiguncel.vip/","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f490ad7c5f188420c5bbdea4ada209c","sha1":"abb612762530da8103ad261be4bdf21068d0b506","sha256":"fa89c7ede1f70d706b8a8a2a6d815859ebacdd95071ee8f88e6da6e85f667a93","sha512":"87bb3b11f88bd2422d546fac177755408a2a52fbc1504785f7da47057007b4ca2189f61b3b258ce4ab60b919263a221b50fde17b2470cffaf9b7cd453e49375d","ssdeep":"","tlshash":"4fe0866b796b5821a9fb75aa5a2a4358396104122941d401694c54015e20e9a257fed4","size":299,"data":"","first_seen":"2026-08-06T12:35:55.199834Z","last_seen":"2026-08-06T22:25:13.336839Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.girisiguncel.vip/","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b2fa378c1949952bcaecda8e23a7148","sha1":"320ac5ad504fd6b7b0c88addc207ac09fc4e2ca6","sha256":"f65e9ad1052bae57b5fcb90fbcc2c2ead8333f26710bd0a48e0c24732ee8c1ea","sha512":"abca2bc9fc9bb7c7ba3e684f7a7245a642d5a8ff42a667d500008d00711df23021925963afa462c6202295a95ab55b01ead61fa36da91a5c4fb6a45c6f3e083c","ssdeep":"","tlshash":"c6e06166e0055d004f4f0c98822f6a0ed5dd86437cff0855092673c08324e6f8f525b4","size":408,"data":"","first_seen":"2026-08-06T12:38:30.238031Z","last_seen":"2026-08-06T22:25:13.337385Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"galabet.girisiguncel.vip/uploads/aff-p2ki3kjpsk.png","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.156Z","timestamp":1786039616156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girisiguncel.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 14:39:53 GMT","end":"Fri, 30 Oct 2026 14:39:52 GMT"},"fingerprint":{"sha1":"C6:81:F3:C3:E0:70:59:BE:7B:45:6E:CB:F1:74:D1:A8:8C:5F:02:01","sha256":"CF:9C:D5:0A:F3:9E:F5:83:51:02:9E:FF:D7:55:D1:BB:1B:BE:E3:54:0D:2E:0F:37:84:80:30:97:B0:21:36:42"}}},"request":{"raw":"GET /uploads/aff-p2ki3kjpsk.png HTTP/1.1\r\nHost: galabet.girisiguncel.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.girisiguncel.vip/\r\nCookie: tcms_d7555bde61=ta1loe98c1a2gtepj3th3ej91p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 01 Aug 2026 17:01:00 GMT\r\netag: \"382e-657ff3fe6cab6\"\r\naccept-ranges: bytes\r\ncontent-length: 14382\r\ncontent-type: image/png\r\ndate: Thu, 06 Aug 2026 18:06:56 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14382,"size_decoded":14614,"mime_type":"image/png","magic":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","md5":"ca00b5c61628aa5787b46e484207ba9f","sha1":"3128ca343379a35adc0da4ae9e12b4e9d8ebdfc1","sha256":"e491bcb65d7a2eb5b826fb025a30d3e1fa32e6c060cf6c7e984546b2449e1acd","sha512":"df610f641806c9d4bbdf2513b59bb895f9021781e0e83103a2af8666c2943cc2e552d48ea7c42e4572345e401d6b3f0fd148ef7f003c76f33b70c64ae93f8a1e","ssdeep":"192:zlkEu03gJVbg9RQaz9La2jyllbVZ/EO+h0+oNEMlZJgnVLf1tmH2/Dk/d1292:hkI3awRlrWllbEO4QEMlZ2nxcGATt","tlshash":"b852cfe1e3d78a80990ad9c0e0c594555dd76b3327ceefcae4893d9d788e50b6064a43","first_seen":"2026-08-06T12:35:55.186476Z","last_seen":"2026-08-06T22:25:13.331188Z","times_seen":8,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.girisiguncel.vip/favicon.ico","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.351Z","timestamp":1786039616351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girisiguncel.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 14:39:53 GMT","end":"Fri, 30 Oct 2026 14:39:52 GMT"},"fingerprint":{"sha1":"C6:81:F3:C3:E0:70:59:BE:7B:45:6E:CB:F1:74:D1:A8:8C:5F:02:01","sha256":"CF:9C:D5:0A:F3:9E:F5:83:51:02:9E:FF:D7:55:D1:BB:1B:BE:E3:54:0D:2E:0F:37:84:80:30:97:B0:21:36:42"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: galabet.girisiguncel.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.girisiguncel.vip/\r\nCookie: tcms_d7555bde61=ta1loe98c1a2gtepj3th3ej91p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://galabet.girisiguncel.vip/\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 06 Aug 2026 18:06:56 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T00:51:56.928895Z","times_seen":17878665,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.girisiguncel.vip/","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-06T18:06:55.466Z","timestamp":1786039615466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girisiguncel.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 14:39:53 GMT","end":"Fri, 30 Oct 2026 14:39:52 GMT"},"fingerprint":{"sha1":"C6:81:F3:C3:E0:70:59:BE:7B:45:6E:CB:F1:74:D1:A8:8C:5F:02:01","sha256":"CF:9C:D5:0A:F3:9E:F5:83:51:02:9E:FF:D7:55:D1:BB:1B:BE:E3:54:0D:2E:0F:37:84:80:30:97:B0:21:36:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet.girisiguncel.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: tcms_d7555bde61=ta1loe98c1a2gtepj3th3ej91p; path=/; secure; HttpOnly; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4669\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 06 Aug 2026 18:06:55 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13995,"size_decoded":5072,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (643), with CRLF, LF line terminators","md5":"7acd22bd2e9edbc980770fad35f8dddd","sha1":"a3bbcb39cb1a86a9e48e2b3951a9c49d1a1ea93d","sha256":"d083d0f959e5c390a1ebfd86f75d3158829e074f889dffa7d4776b1f01f91af7","sha512":"dbe67ea84b326781137fa6b74477b4b619f98b41a455d46b8b8d002a5a8f67c65a80f593bb4578429bda903d248df5adfb330263336931d566af5ba0c5fff326","ssdeep":"192:DkGT8ZA2KGWBv/r3gCveavmP48kQg3hCNelCLh8Z2bbb3O3XbIq:fOAvGWBvDwCvZ+PyQgoNEqh8Mbby3Xbt","tlshash":"dd52d692a6f6742f077b82c796a71f2efed7d323d9225809335c8b650b95ec2858310c","first_seen":"2026-08-06T18:07:26.954028Z","last_seen":"2026-08-06T18:07:26.954028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":95,"connect":19,"send":0,"wait":35,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.girisiguncel.vip/theme/style.css","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.015Z","timestamp":1786039616015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girisiguncel.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 14:39:53 GMT","end":"Fri, 30 Oct 2026 14:39:52 GMT"},"fingerprint":{"sha1":"C6:81:F3:C3:E0:70:59:BE:7B:45:6E:CB:F1:74:D1:A8:8C:5F:02:01","sha256":"CF:9C:D5:0A:F3:9E:F5:83:51:02:9E:FF:D7:55:D1:BB:1B:BE:E3:54:0D:2E:0F:37:84:80:30:97:B0:21:36:42"}}},"request":{"raw":"GET /theme/style.css HTTP/1.1\r\nHost: galabet.girisiguncel.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.girisiguncel.vip/\r\nCookie: tcms_d7555bde61=ta1loe98c1a2gtepj3th3ej91p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 01 Aug 2026 15:36:55 GMT\r\netag: \"2b81-657fe132c6650-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2974\r\ncontent-type: text/css\r\ndate: Thu, 06 Aug 2026 18:06:56 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11137,"size_decoded":3256,"mime_type":"text/css","magic":"ASCII text","md5":"e99c436cb16e8da3c80893ed0e153908","sha1":"fdaf7375db8706a97912dd9b31e625fd7c2af029","sha256":"3829df50c7e0085c297932dda50b3c94fa835984f8928b0f617558a78d541489","sha512":"745ca1c35c25100359b8a0fc2fe35b9e416920cfa37dc1a1aa2c50ca675453b52c79e01331aba8f2d82fa83732f0394049d809999705c07b0f9f0155f169e623","ssdeep":"96:r9UCKOhn7kLVcWleTNdphW5IS6lXafwW4N2qfdwNLWWpMKgYEr9q0hWaXthWihEq:j7IaNYh6QiVwNL5fLEQUr/h73RJD","tlshash":"e93241f7b224f138b93bfc54a28465df71847812d89687f8de82a128c5c76f326b0748","first_seen":"2026-08-06T12:35:55.192743Z","last_seen":"2026-08-06T22:25:13.333155Z","times_seen":8,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.143Z","timestamp":1786039616143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.girisiguncel.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21740\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 07:38:39 GMT\r\nexpires: Fri, 06 Aug 2027 07:38:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37697\r\nlast-modified: Tue, 09 Sep 2025 18:29:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21740,"size_decoded":22552,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21740, version 1.0","md5":"feb32a783dde93d92ecd80e2e5ee2fd6","sha1":"6a77846330b45303ba88cc52db486332eb10a1b4","sha256":"afb7198c978dc6146a16f600df962a51d0b607334332929d4d123749c27586ff","sha512":"0a03f0d4f725df8de1d5a383a0f364b8636005edae784b0decb583e1150740e1e338569e8d5a8b2c8021665c529d3ca522c6178a835533b7342b056fb3dc0543","ssdeep":"384:+IC0yB1UD32kqUXqzZ7v/+XA/eK0AQaHjZipRYBpcsTjtVIVEElBs:+b0+WDmkdXqt/iYAC0RgcccVlBs","tlshash":"c1a2e170cece390ee329716e02568a78e6878ce94a053d20949d9d390fdaf3497c5df4","first_seen":"2025-09-10T18:57:50.481843Z","last_seen":"2026-08-13T22:23:50.379521Z","times_seen":1109,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":33,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.girisiguncel.vip/uploads/aff-7dgwtpvxju.png","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.154Z","timestamp":1786039616154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girisiguncel.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 14:39:53 GMT","end":"Fri, 30 Oct 2026 14:39:52 GMT"},"fingerprint":{"sha1":"C6:81:F3:C3:E0:70:59:BE:7B:45:6E:CB:F1:74:D1:A8:8C:5F:02:01","sha256":"CF:9C:D5:0A:F3:9E:F5:83:51:02:9E:FF:D7:55:D1:BB:1B:BE:E3:54:0D:2E:0F:37:84:80:30:97:B0:21:36:42"}}},"request":{"raw":"GET /uploads/aff-7dgwtpvxju.png HTTP/1.1\r\nHost: galabet.girisiguncel.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.girisiguncel.vip/\r\nCookie: tcms_d7555bde61=ta1loe98c1a2gtepj3th3ej91p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 01 Aug 2026 17:05:04 GMT\r\netag: \"41e2-657ff4e70603a\"\r\naccept-ranges: bytes\r\ncontent-length: 16866\r\ncontent-type: image/png\r\ndate: Thu, 06 Aug 2026 18:06:56 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16866,"size_decoded":17098,"mime_type":"image/png","magic":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","md5":"8a2ec9b0fde41ad2d7e558772fcb80e8","sha1":"36e7905d6d7dbc6115e414ebc0650a4c70924887","sha256":"9c269ba4be0a10dffeac9728b0a56e6441aaf47c10bb5cb66999d7a53be1b6d3","sha512":"d545f7f0566a69a93d6dd00cfa5ae5007f3648b6021c083f73c9b6568a7075de95e8e5958114d5e3c1899d2368fbefca3357e3cbde98eeb3a30d28cea2e8569f","ssdeep":"384:hkI3awPQK3oJ28jbKEsSXsgx5bvhT0WCMK2ZNSAG:hkI3pKJdKZSXsUv50X52CAG","tlshash":"3672d1cadbd4d6c7a01ac4516430fed41a7593324af9cb8fd2acae2cc206b619375c1d","first_seen":"2026-08-06T12:35:55.179434Z","last_seen":"2026-08-06T22:25:13.330455Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.girisiguncel.vip/uploads/aff-uupsjsh895.png","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.158Z","timestamp":1786039616158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girisiguncel.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 14:39:53 GMT","end":"Fri, 30 Oct 2026 14:39:52 GMT"},"fingerprint":{"sha1":"C6:81:F3:C3:E0:70:59:BE:7B:45:6E:CB:F1:74:D1:A8:8C:5F:02:01","sha256":"CF:9C:D5:0A:F3:9E:F5:83:51:02:9E:FF:D7:55:D1:BB:1B:BE:E3:54:0D:2E:0F:37:84:80:30:97:B0:21:36:42"}}},"request":{"raw":"GET /uploads/aff-uupsjsh895.png HTTP/1.1\r\nHost: galabet.girisiguncel.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.girisiguncel.vip/\r\nCookie: tcms_d7555bde61=ta1loe98c1a2gtepj3th3ej91p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 01 Aug 2026 17:03:58 GMT\r\netag: \"3a5b-657ff4a7c2e5b\"\r\naccept-ranges: bytes\r\ncontent-length: 14939\r\ncontent-type: image/png\r\ndate: Thu, 06 Aug 2026 18:06:56 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14939,"size_decoded":15171,"mime_type":"image/png","magic":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","md5":"4b8335d18dcc520d3c25c66f3ea74b41","sha1":"2e8bc12bccdeecbe955387fd222838b4258bce96","sha256":"bf3633ff260588e5fcd95fd0e5676533e407a6a095b83c332433391b1a688335","sha512":"cb95a4d52e669840cabbf824d755e4b18947b21909db1289e5131304137a4d8d6b3129aeaed02ec4f07b1184c506ac88d48e3e738422358005856a61809cdbf5","ssdeep":"384:hkI3awjseLYREyxrsG2VYp3lV4HmV5I9UzW/POUPB:hkI3pjAEyxrd2Vc3lVsUna/PNPB","tlshash":"b262c09ea1fa9a0fe00cc65ba4339d147bb9bf2461d7a3c9cc4906ea31456471c34b0a","first_seen":"2026-07-14T13:34:09.324529Z","last_seen":"2026-08-06T22:25:13.334742Z","times_seen":10,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.girisiguncel.vip/","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.383Z","timestamp":1786039616383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girisiguncel.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 14:39:53 GMT","end":"Fri, 30 Oct 2026 14:39:52 GMT"},"fingerprint":{"sha1":"C6:81:F3:C3:E0:70:59:BE:7B:45:6E:CB:F1:74:D1:A8:8C:5F:02:01","sha256":"CF:9C:D5:0A:F3:9E:F5:83:51:02:9E:FF:D7:55:D1:BB:1B:BE:E3:54:0D:2E:0F:37:84:80:30:97:B0:21:36:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet.girisiguncel.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://galabet.girisiguncel.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tcms_d7555bde61=ta1loe98c1a2gtepj3th3ej91p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4676\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 06 Aug 2026 18:06:56 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13998,"size_decoded":4983,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (643), with CRLF, LF line terminators","md5":"49099e43b2b64cf513b9e3b7f471694b","sha1":"ab2ade560c5e02a5b3cb65ca82b0009e9f0d435b","sha256":"86915d6a72c6adb471d32189da0e6748bc08cdae2988633a479141d50bbeab20","sha512":"913da13da1d0daa32479b945081b8126d368af72f1aa649bdeae7ab58702f2ea7be599bbfd1b34452996032de1a9a757f103963ffbc32df58ea834dfa151788d","ssdeep":"192:DkGT8wgKGWBv/Jp3gCveavmP48kQg3hCNelCLh8Z2bbb3xk3XbIq:fxJGWBvBpwCvZ+PyQgoNEqh8Mbb+3Xbt","tlshash":"5852d692a6f6642f077b82c796a71f2effd7d323d9225809735c8b610b95ec2958310c","first_seen":"2026-08-06T18:07:26.957631Z","last_seen":"2026-08-06T18:07:26.957631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.girisiguncel.vip/captcha.php","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.022Z","timestamp":1786039616022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girisiguncel.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 14:39:53 GMT","end":"Fri, 30 Oct 2026 14:39:52 GMT"},"fingerprint":{"sha1":"C6:81:F3:C3:E0:70:59:BE:7B:45:6E:CB:F1:74:D1:A8:8C:5F:02:01","sha256":"CF:9C:D5:0A:F3:9E:F5:83:51:02:9E:FF:D7:55:D1:BB:1B:BE:E3:54:0D:2E:0F:37:84:80:30:97:B0:21:36:42"}}},"request":{"raw":"GET /captcha.php HTTP/1.1\r\nHost: galabet.girisiguncel.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.girisiguncel.vip/\r\nCookie: tcms_d7555bde61=ta1loe98c1a2gtepj3th3ej91p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nx-robots-tag: noindex, nofollow\r\nx-content-type-options: nosniff\r\ncontent-type: image/svg+xml; charset=utf-8\r\ndate: Thu, 06 Aug 2026 18:06:56 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4325,"size_decoded":4644,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"3f8a0ec544b1bc71aa3746a0470c0499","sha1":"dbfd316a18af3c86765077727f22b497ee57fb59","sha256":"5bed13159399b9b5f15986a0cc03e12fdd4a89d6d27aa2d1cf2a40b75cc8e886","sha512":"18859338197145639d1b797cab7dd1844c0a5af44992fb618ecc0d0c54f6458ca9210a95e2f22719c617bc1c5413369194d75713a509f4da0fc53157b1d921f0","ssdeep":"48:Aj8QjT+qbtwOMleHfKD33S+WBCZcvu/o9Zo5kBtz0iRRnmaru8ML:6wbeKTS+WiC7NShL","tlshash":"09912c78232dea7ca911419cd79fb7b1311e24c5072a9b9974120a7fbb04baf3637690","first_seen":"2026-08-06T18:07:26.958769Z","last_seen":"2026-08-06T18:07:26.958769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.142Z","timestamp":1786039616142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.girisiguncel.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 07:45:01 GMT\r\nexpires: Fri, 06 Aug 2027 07:45:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37315\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-14T00:28:47.59075Z","times_seen":20293,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":17,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.147Z","timestamp":1786039616147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.girisiguncel.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 07:45:01 GMT\r\nexpires: Fri, 06 Aug 2027 07:45:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37315\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-14T00:28:47.59075Z","times_seen":20293,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":26,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nostatz.vip/track.php?t=ec50e72b2a131dada020\u0026u=%2F\u0026h=galabet.girisiguncel.vip\u0026ti=Galabet%20Giri%C5%9Fi%20G%C3%BCncel\u0026r=","fqdn":"nostatz.vip","domain":"nostatz.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.152Z","timestamp":1786039616152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nostatz.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:45:55 GMT","end":"Thu, 01 Oct 2026 14:45:54 GMT"},"fingerprint":{"sha1":"56:E4:A6:D7:B9:76:07:E0:B3:50:BC:E3:02:15:B2:82:7D:DF:FB:41","sha256":"2D:48:14:09:1D:10:BE:C9:16:B6:6F:97:74:FB:35:22:85:6E:ED:6D:86:AA:AC:F6:85:29:C9:B5:FD:17:36:EB"}}},"request":{"raw":"GET /track.php?t=ec50e72b2a131dada020\u0026u=%2F\u0026h=galabet.girisiguncel.vip\u0026ti=Galabet%20Giri%C5%9Fi%20G%C3%BCncel\u0026r= HTTP/1.1\r\nHost: nostatz.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.girisiguncel.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-type: image/gif\r\ndate: Thu, 06 Aug 2026 18:06:56 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":268,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-14T00:52:06.071003Z","times_seen":1029994,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":125,"connect":16,"send":0,"wait":20,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.girisiguncel.vip/uploads/aff-yyt9ygagq2.png","fqdn":"galabet.girisiguncel.vip","domain":"girisiguncel.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.157Z","timestamp":1786039616157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girisiguncel.vip","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 14:39:53 GMT","end":"Fri, 30 Oct 2026 14:39:52 GMT"},"fingerprint":{"sha1":"C6:81:F3:C3:E0:70:59:BE:7B:45:6E:CB:F1:74:D1:A8:8C:5F:02:01","sha256":"CF:9C:D5:0A:F3:9E:F5:83:51:02:9E:FF:D7:55:D1:BB:1B:BE:E3:54:0D:2E:0F:37:84:80:30:97:B0:21:36:42"}}},"request":{"raw":"GET /uploads/aff-yyt9ygagq2.png HTTP/1.1\r\nHost: galabet.girisiguncel.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.girisiguncel.vip/\r\nCookie: tcms_d7555bde61=ta1loe98c1a2gtepj3th3ej91p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 01 Aug 2026 17:03:17 GMT\r\netag: \"3239-657ff480bd5d8\"\r\naccept-ranges: bytes\r\ncontent-length: 12857\r\ncontent-type: image/png\r\ndate: Thu, 06 Aug 2026 18:06:56 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12857,"size_decoded":13089,"mime_type":"image/png","magic":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","md5":"89ae9758b6c695afba44e43214f766ff","sha1":"2ec27f2795bd89b489cedadc1cf810936560d6d4","sha256":"33077c61e5a1237a94ac00f16b9c1c057c5bd6e0a0c158cff9d569f781956a4d","sha512":"b0744cbd28fb0b45747dfe118cbf8a593accf5f3a051a8c2019bb018d3d2589fabe9d9c9b2093d905f38ff89213beba558459e438848a5c0de0747eb0089b7ed","ssdeep":"192:zlkEu03gJVbg9dHx6yPrBP3oDe6sr/LNI3Lrnq2lVkP0GnwpfC7/zfp8M1b1R:hkI3awdHRTBP3+krjNmL7q2LF23zfTZR","tlshash":"f642c09b68b8c9e64c4087582569bb3f9aff0e2dd47eafcb28c01544f68d472387a501","first_seen":"2026-07-14T12:24:12.313284Z","last_seen":"2026-08-06T22:24:28.982948Z","times_seen":7,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"galabet.girisiguncel.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.012Z","timestamp":1786039616012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.girisiguncel.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 06 Aug 2026 18:06:56 GMT\r\ndate: Thu, 06 Aug 2026 18:06:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6816,"size_decoded":1313,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c1192235fce50de6b1862e00e3eb4e5b","sha1":"1acc08e2711f780af3a52a52e820282f8cde8a81","sha256":"7ea10d6b629da25ecda50bce71d3cfdcdd586f2a8c65018ac741b637050c1cf8","sha512":"0777d00a666c459828c22a4df1d3d645f8015271ce5056a67e888e1704184498607dde6d23e5d94e98b25b3c7b91cc37b0b813256b39ad3bba4ac2c722fd7bca","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOXaCyOXauOXahJc+ueOXaCNuOxMaCyOxMauOxMC:ACFJRSdCmaRBUCj3Ro7CcQRvd","tlshash":"83e1a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0854dc7ec2a7375b1c","first_seen":"2025-09-12T03:43:28.128552Z","last_seen":"2026-08-12T20:56:43.721486Z","times_seen":799,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.145Z","timestamp":1786039616145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.girisiguncel.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 07:45:01 GMT\r\nexpires: Fri, 06 Aug 2027 07:45:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37315\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-14T00:28:47.59075Z","times_seen":20293,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":21,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabet.girisiguncel.vip/","date":"2026-08-06T18:06:56.148Z","timestamp":1786039616148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://galabet.girisiguncel.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21740\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 07:38:39 GMT\r\nexpires: Fri, 06 Aug 2027 07:38:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37697\r\nlast-modified: Tue, 09 Sep 2025 18:29:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21740,"size_decoded":22552,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21740, version 1.0","md5":"feb32a783dde93d92ecd80e2e5ee2fd6","sha1":"6a77846330b45303ba88cc52db486332eb10a1b4","sha256":"afb7198c978dc6146a16f600df962a51d0b607334332929d4d123749c27586ff","sha512":"0a03f0d4f725df8de1d5a383a0f364b8636005edae784b0decb583e1150740e1e338569e8d5a8b2c8021665c529d3ca522c6178a835533b7342b056fb3dc0543","ssdeep":"384:+IC0yB1UD32kqUXqzZ7v/+XA/eK0AQaHjZipRYBpcsTjtVIVEElBs:+b0+WDmkdXqt/iYAC0RgcccVlBs","tlshash":"c1a2e170cece390ee329716e02568a78e6878ce94a053d20949d9d390fdaf3497c5df4","first_seen":"2025-09-10T18:57:50.481843Z","last_seen":"2026-08-13T22:23:50.379521Z","times_seen":1109,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":41,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}