{"report_id":"4316c511-6cf5-44ef-94d1-ab6f0f459324","version":6,"status":"done","tags":[],"date":"2026-04-28T13:55:09Z","url":{"schema":"http","addr":"galabetz.com","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"104.21.32.27","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"galabetz.com/","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"title":"Galabet 1068 Giriş | Güncel Adres Değişiklikleri","dom":{"size":48084,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9221)","md5":"8e07b2191867d9bfbca225288c185e48","sha1":"bac22660ca496e61fed1c53187740d0142266b00","sha256":"8586d31208029f4de2e2d0d44b98913880b7e951c26fe926df6876dfe3789794","sha512":"f97c9b8b2d970f2e13e36613714b89e4d4259cda8473d9b9f1230e26f840d3d4d779ea3bba465ec5ecdeed101cda6c15dfff1e7469dcfd7fa495f080a28c6a3a","ssdeep":"384:AQEoVjImm9TMQJqr/ZdSZUaAMkWMGQ36lvf/BPQkH38k+uOvmZfm2GZ2Tbf9cNtW:jVUJWfZdypPPZ8k+uiEVf9cNRWo0sCd","tlshash":"5f2375e60a5d313f8b4db6979049b218efa74310ce04da9573f6fb5c8965ba205f320e","dom_hash":"domhash973d7296127c7a09c50281517105212c","first_seen":"2026-04-28T13:55:10.377814Z","last_seen":"2026-04-28T14:28:59.695455Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galabetz.com","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"104.21.32.27","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T13:55:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"galabetz.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-12","domain_rank":0,"first_seen":"2026-03-29T14:14:47.45766Z","last_seen":"2026-04-13T16:55:53.252992Z","alert_count":64,"request_count":16,"received_data":415740,"sent_data":7839,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:27.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"galabetz.com/wp-content/themes/occasio/assets/js/navigation.min.js?ver=20220224","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2605713fb8d91ee848e8c40eaf049adb","sha1":"6aab26e797557881af59647d96c09514a05c3ab0","sha256":"cd57db2492c5251e291415c0c3c08317718b634d781f56172e0b114344cc8e15","sha512":"468f7a7aa8ea0a3ff691bc32e575623693bb4b3eb32a4662e3d8390e14107a148c55f536187ef1ee2a8012edb2673a2661f9d065d1f23066565ebf0f8835d36c","ssdeep":"","tlshash":"c741e3ba391d27370cbf35e3d0ff75c53a76246ce88240116059c85d2de4e9106ba9f8","size":2061,"data":"","first_seen":"2023-03-10T09:51:08Z","last_seen":"2026-08-08T08:08:54.9245Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a40bbd1da8c71a6a1db72d2d79dfeb94","sha1":"4858f6071b2386909aa1ea91dd62fd85cdb17520","sha256":"595ce09e7c3c9554cf1a2495990e2248cf02a7333898b95213caf449cee25a03","sha512":"fe73905fe08ecef1fac9d88f49bbf18b5a2ae5fd87827c242abd68a2881f8b71b5fd7782a6f7407488ac061c46607ac119be2846d9d6fec207ee5c4b9da72643","ssdeep":"","tlshash":"7c61979ae7763cdbb2f900f2697a0d47eb614435d6c8d438c9bea3141cb5893c274b46","size":3323,"data":"","first_seen":"2026-04-13T16:55:53.963684Z","last_seen":"2026-04-28T14:28:59.72166Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-10T21:56:23.658019Z","times_seen":310821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/themes/occasio/assets/js/svgxuse.min.js?ver=1.2.6","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2b3c4a1205adeb5f57cd1db0acabcba","sha1":"6f564918cbb2a673ab64564f4c60653c209b03bd","sha256":"fb16e51480f1812bba39f47a4dd2e154767356b870f1e5e2564f0f462f40098f","sha512":"ca2a41af061d0b8fa00b7466e8563c286fb6c4d4d4f9fad049c19da971566a74d09fd641441349dd1def43eee0900c6eda295be52b857abd032fe74d4d3b7286","ssdeep":"","tlshash":"165175e67750a2b4198e9617f2fff318b73612796a4b4840912ee4c06c3cec71466a98","size":2927,"data":"","first_seen":"2023-03-07T01:33:11Z","last_seen":"2026-08-10T22:18:05.002697Z","times_seen":2296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/custom-script-js-extra","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5fd97177d46fcc3d402c027954b0fb3","sha1":"226358da129a551eca0040508c75f1c282c1854d","sha256":"029ac1954ddfb56f526e9c0dfe560d8f1f5396aba581e7681df434540cebac0a","sha512":"f31e725ac6c5ba6bb47238b263ae3c0b1fa27df229fa28f26e0d9ae4b7811320c4f86167a7bc8d0de83c7fac988ad0f8c249f7029362974c32b9e6cac33a771f","ssdeep":"","tlshash":"e8f02b42c2ed4ec103925c721278403f418b2305c934d88652c9f588087044c86c530b","size":445,"data":"","first_seen":"2026-04-13T16:55:53.959674Z","last_seen":"2026-04-28T14:28:59.723078Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/occasio-navigation-js-extra","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4297f91011d662e50bfbac2a9667dde","sha1":"f989f80a5ae06fcd519a321555ba999578fef302","sha256":"784e4de14a78377dbe56a6759a1c5a7d92f27ff46bea0481089445e866e00796","sha512":"f3517fe36318a3f4dbf75c776440aff6335c66298a2c69fc9296edff4fd0a036aff619d01ef5cdc3fc51505904c3b0f4c54cdaa257b16a387b8831f7f425535b","ssdeep":"","tlshash":"9d01dc1fd0d96c07962719b6dd31a10cc0072208cebc9699a8be965c84b00222185f8c","size":749,"data":"","first_seen":"2026-04-13T16:55:53.961593Z","last_seen":"2026-04-28T14:28:59.722419Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/plugins/wp-meta-and-date-remover/assets/js/inspector.js?ver=1.1","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c39c8ea6659fbf8cdded118913e96ea3","sha1":"f48f56843097b2a6efa40877954b8de444765111","sha256":"cff9ed2f1fc208cdb20cc7bae599161e38c10a95ab6e6801a7047f358f03b007","sha512":"9bb1c7f6b6d3d2855ed0da0d87b4535272a017a432cca096970707b5c346b54234867cfc523c09ddd367919a6a52c68b6a29cd25527caa60c01877f105e8b956","ssdeep":"96:2SADHHvyai3nPMQrhL3quPTpgQkQ5RAlv+LQCC5kpHkWtCzw:2SA7P7i3PMQrhL3quPTpgQkQ5ulv+LQa","tlshash":"30915e0172be2239622fc5af088fd14db355048b194c6d12bafc1712af65f7483e3ae9","size":4316,"data":"","first_seen":"2024-07-13T16:04:00Z","last_seen":"2026-08-10T16:06:19.731089Z","times_seen":2725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"galabetz.com/wp-includes/css/dist/block-library/style.min.css?ver=6.9.4","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:47.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9.4 HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 14889\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 05 May 2026 13:54:48 GMT\r\nlast-modified: Tue, 03 Feb 2026 19:30:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2Bga8TlbpEBT93AbwXpI%2BqGlf1vADsXkxtX9kH9m617%2B3ZgMOPi03bjNiZTkoxwh0NNEghrJK65%2F6cT3T%2BMqdwHqr7U4hpYbe4OPS5BpibxHEf7ktl7%2Bn5paOnG61mw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f995b180b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":119358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"b592e353685f2eabaf8f935e377a95a0","sha1":"30d4a0ff9561f9c96a0a29cce379dfbde9749a65","sha256":"3b44e208bba827e614cf1e36e639e3c7cfb849771fb17e99bb38e14022d30d16","sha512":"193686fe6c1766b540e311015484745ad2ceddb9ffc3f883ac3ae66f1d29e32bca94ba11d40f3d0f6689c306f7760ae167d8af73a22778aba93a772e076a9cd4","ssdeep":"3072:WoeJBCCUQg5MG7x+qehvP0xdclkWwbFpPu:CfUQg5MG7x+qehvP0xdclkWiF0","tlshash":"cfc3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2026-02-03T19:45:02.649878Z","last_seen":"2026-08-10T21:56:23.619573Z","times_seen":50212,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/themes/occasio/style.css?ver=1.1.3","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:47.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-content/themes/occasio/style.css?ver=1.1.3 HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 12249\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 05 May 2026 13:54:47 GMT\r\nlast-modified: Wed, 12 Nov 2025 08:04:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FOk1WkCIqrBflhM%2FOagIjDKChO7nvEOrdI%2BnILwBGTzGfqjo5qcOpsR06ijXPbR%2B1Dpd5V8adJoM46kQgiyj9A4MzrSjiEKVFKXY%2FlTjRIZ%2Flb%2BHNa3jgdhbHforYF0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f995b1a0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":82909,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (353)","md5":"2db755d448fe681955e4e53ad9d473c9","sha1":"da40513cdf1d49dc10c34892aab7ee5569861be7","sha256":"f2458c9a9bd98bc61714265015636d902d1811beafc0c81a6cf020c7c9b88fa2","sha512":"96d2d2ec1dc3ad6eefe6cc9379cf46c056824beb52ed8fb512908d82547f041c1d570dfd1071dffda82ee3af6d1fa1ab51ca0eb57035148159328b4c4e5099dc","ssdeep":"1536:4HiDp3JMlMmipmchLfZBEY42P7j7U8L1jZ7OT95+qex:VpOlj70foi7J","tlshash":"e28394199ea11c81671fc3aeff9dead8db1d0411cf094fe9f045d12893c86a506bdb8a","first_seen":"2024-07-07T05:52:38Z","last_seen":"2026-08-08T08:08:54.910137Z","times_seen":49,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/themes/occasio/assets/js/svgxuse.min.js?ver=1.2.6","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:47.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-content/themes/occasio/assets/js/svgxuse.min.js?ver=1.2.6 HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1109\r\nlast-modified: Wed, 12 Nov 2025 08:04:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMTWgzzpcX4opmG9p83ykIJmXwErV29DghnuoALHVc3KeoGb2KSiXFwlOIhJeZA2mm6Wik3rU0jYcxk2max%2FTLMRg1n12MIFnJRM3JJ4Ig4wzerWEMoDvnn366Ke5es%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f995b1d0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2927,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (522)","md5":"a2b3c4a1205adeb5f57cd1db0acabcba","sha1":"6f564918cbb2a673ab64564f4c60653c209b03bd","sha256":"fb16e51480f1812bba39f47a4dd2e154767356b870f1e5e2564f0f462f40098f","sha512":"ca2a41af061d0b8fa00b7466e8563c286fb6c4d4d4f9fad049c19da971566a74d09fd641441349dd1def43eee0900c6eda295be52b857abd032fe74d4d3b7286","ssdeep":"","tlshash":"165175e67750a2b4198e9617f2fff318b73612796a4b4840912ee4c06c3cec71466a98","first_seen":"2023-03-07T01:33:11Z","last_seen":"2026-08-10T22:18:05.002697Z","times_seen":2296,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/fonts/barlow/7cHpv4kjgoGqM7E_DMs5.woff2","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:48.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-content/fonts/barlow/7cHpv4kjgoGqM7E_DMs5.woff2 HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/wp-content/fonts/b4dc100fe82a01955a822816e1a1e62a.css?ver=20201110\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22196\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 05 May 2026 13:54:48 GMT\r\nlast-modified: Wed, 12 Nov 2025 08:05:59 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9CH37jraoCQ7Y73tJA5I0gdsnWylEWPnaj1BPn3r4Ce9vV8DrPWSkh5t%2F3v8GvB409QB2356nUJZ%2BF2n7z0UIoNjYmsEmkkhwyStdXHjh4aNiYzkGB5lawrcIULmWm8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f9aac660b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":22196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22196, version 1.0","md5":"81419bf5abb50ae075ddf1aee89da819","sha1":"4f0f26f139db2a7eee91dca038012399b3abdc47","sha256":"b0a8ad37ac45f5fb22ced461576db72e44e295107aad7a9c8a7a4bad728fd03b","sha512":"2445e12945aafa3ceb309e854253949361a3ce080197295d48b7b54fcc8d8cf2da24dc69dfaeb6c98c6a402742e4cc4bae2d12f57cc2ec3e79a676440fba35f3","ssdeep":"384:7wDo/T9qjZ6Qlb3pgWw/1n2vZvYUwVlykCtnexzuDDxlNN8fsbB:7wUQV626X1n2vRYUwlykMou/vN","tlshash":"04a2d084dae9716a4cc18aa602830aaddf76a048917c9f0cb5fb129d19425747f0fbf9","first_seen":"2025-09-11T18:14:34.493772Z","last_seen":"2026-08-10T21:08:01.34921Z","times_seen":11554,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/fonts/barlow/7cHqv4kjgoGqM7E3t-4s51os.woff2","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:48.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-content/fonts/barlow/7cHqv4kjgoGqM7E3t-4s51os.woff2 HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/wp-content/fonts/b4dc100fe82a01955a822816e1a1e62a.css?ver=20201110\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22788\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 05 May 2026 13:54:48 GMT\r\nlast-modified: Wed, 12 Nov 2025 08:06:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBp2b9Q%2Bvut1UbEvjLgfR4jVp9qOmrJCsPnnm5idnniotYGp2RqHrodHWUqThU6RH21axLB%2BcnVTtLLvPvbT664GINHhQTMe7HW%2F8iziJm9k3j42AJheHF%2FRm8PMqzQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f9abc6c0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22788, version 1.0","md5":"15481e4eab6dc3277d89f1d5871cf08f","sha1":"25ba8a978a3a493ec9f835f7f2cdefe16b55b295","sha256":"2d797dd8b35dcb3413e1af9d7052b3f4f8c341a147cdcb01f4f06af80db53289","sha512":"bb5ba24476faa25680e6644dba33a98afca6ef0936f7be6ee3888d09c2d7b658ccfaae395f173ded5331529e4548b25d923490be1363132ed30e0e368812dace","ssdeep":"384:Jc/2c7dFz93/eRqONl+60qnSY8IkG5zjP2Z8VgG0BFrnIZbp/QPGIZgdT9mEl4/2:JM2c7dZ9vkq68606SVzGJ2uuubbYgDmM","tlshash":"36a2d0de44d674a2d12f32f43c832d1c13bd3558075ad59b6b1a068bf2bca7621e3527","first_seen":"2025-09-11T19:29:34.815552Z","last_seen":"2026-08-10T21:25:19.156331Z","times_seen":9516,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/fonts/barlow/7cHpv4kjgoGqM7E_Ass52Hs.woff2","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:48.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-content/fonts/barlow/7cHpv4kjgoGqM7E_Ass52Hs.woff2 HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/wp-content/fonts/b4dc100fe82a01955a822816e1a1e62a.css?ver=20201110\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14268\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 05 May 2026 13:54:48 GMT\r\nlast-modified: Wed, 12 Nov 2025 08:05:59 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXPpw3oV4PRbc1Ndb%2FkHSyHi%2FgNA3MnmU0pc8bNynpax86H8%2BZFKAxd5WCFFELotnwc75%2FhDynPUuvT4S0oq1O2ukGFXAAfjDAJ7sEUn6SRV7IIBG6CKfhwftijPtU0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f9acc7e0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14268, version 1.0","md5":"30fe91f5bb421da5f47cf26e1fed5700","sha1":"496c894648dec77890c65e08d5f7f19fbbb9e833","sha256":"122b24bc2a90b0abe189f5229768bf2e9ba641324fe2459b48850079625934f1","sha512":"f63a70cb218e7f0e4d567ad9b85d0d376d3af1547b816edd03b78083cdb4a5c1bf1aaa8c0307b42d93bad9e5bd7d337c76c630f0e95b9a6c7740a93293865333","ssdeep":"384:LZpYFM+KzRsVi+lOucx3HXAt9tvc/0S16GtVBt:0W+C+i+lOuR9tUckbt9","tlshash":"0052d033e572dc0ae6bdba3a4d6e55730484125ea73f809535437a4b4241e38923ddaf","first_seen":"2025-09-18T09:06:49.200832Z","last_seen":"2026-08-09T22:05:25.142066Z","times_seen":771,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T13:54:47.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://galabetz.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://galabetz.com/wp-json/wp/v2/pages/9\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://galabetz.com/\u003e; rel=shortlink\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wA02gVgkWU5N9rnF1fU4M5uicCZNK6XtxrwQXmXr8w2DC49IAWMngO5GpU%2BS4f70c2h10vJU2LgwyfORPt3UBJiEm4CqbtYo5CREM7wDYQRpydaMfN94bA2WyhL%2FZcg%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f368f974d4056bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:27.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":45759,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9221), with CRLF, LF line terminators","md5":"b1b0cfa61a5301194d77dab02e9b87d1","sha1":"2416183c8ab0ca843c396fd98fead37b197d9c0c","sha256":"24f6df360ae0f3cfc7136234576af4d3b0fa22c438b0b1a3c574c758d92e1772","sha512":"888572b67889708c7dbad269cb27ea797ed8df97ebdeb7151a579fa68740a9d1929e225ad54a866dbd5b69f5ee9c55b0c073eb7d5765f92e54540af1202897ce","ssdeep":"768:QVUJBRZdypPCuMk+uP0FpDa2f9cNRWo0sCk:5BRypauMk+uPaf9cNRL","tlshash":"ff2367e60a6d313e8b49b6979049b218efa74310cf04da9573f6fb5cc951ba205f321e","first_seen":"2026-04-28T13:55:10.383036Z","last_seen":"2026-04-28T14:28:59.699852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":22,"dns":3,"connect":1,"send":0,"wait":141,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/fonts/b4dc100fe82a01955a822816e1a1e62a.css?ver=20201110","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:47.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-content/fonts/b4dc100fe82a01955a822816e1a1e62a.css?ver=20201110 HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 515\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 05 May 2026 13:54:47 GMT\r\nlast-modified: Wed, 12 Nov 2025 08:06:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BpduKjFD3ZldWIzNZMgv2Mrqsd3%2FmFnE58%2BjLkxvJAV02crd1YE8LHOIXXHU7ft6KY9RXfzzwic2a2r%2B7EuqVWSTHRP%2B2196njXzOVfO1jbMRdWbDkbj2hD8WQClbCE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f995b170b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4998,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f6e16c4ee735df437c0fb35bc8d5c8ab","sha1":"e7af64e0e91e0fab86e790acbbe815449cf5f1a5","sha256":"6979b2f43f5da7a841ed48e691ddc9110aebf4e5c23bfd7a73bdcdfadc17b044","sha512":"ccfa80791bdebb9e9844c98478e6cbedcc5be6941ebfaf10048159db8a950e5d89d647acbbb1daa04e083d4635ff3b4540d9e14397ad1cde522eaef0206636dd","ssdeep":"96:cWYgEaFpYgEaKtJc+uyYgEauNDWYgpaeYgpabJc+uyYgpavNDWOEatOEaoJc+uyi:cDOFuOKF8O6DrLr/8rJhSMkvIWmt6","tlshash":"fba1cd92046b2200d7971dc236ca3e3ade9e7351b844d6796ffe1c8cac9ad253365b0d","first_seen":"2026-03-29T14:14:51.804233Z","last_seen":"2026-04-28T14:28:59.717743Z","times_seen":5,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/plugins/no-category-base-wpml/assets/css/frontend.css?ver=1.5.4","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:47.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-content/plugins/no-category-base-wpml/assets/css/frontend.css?ver=1.5.4 HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 05 May 2026 13:54:47 GMT\r\nlast-modified: Thu, 09 Apr 2026 01:26:40 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zy07gw9BNEwbTIw13zCpO%2BSm%2BQjoAEQ%2FkevtQ7RiPJNJVa2YfEJv4n9Ych90ItrdaVlrFkAnouJxC547hJxzlnWfy5mndnNiWMhB5Sz%2BOu62wAHGMvek1SlR5EKrj%2F4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f368f995b190b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":245,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"e930614570cffd82041c24995ed6df5e","sha1":"84d9a524ed5d19d10194d1bdf761bd5d5be16c73","sha256":"b0f7c79930d0703272013c387713813d50274c596134361aa074d8cdad5fd05a","sha512":"93c0b558413ab0b9005ba4c2751de9eaa62f4092c7a67b12d0f4ebbcf865a6797f05a7fc6a7c0f9b6e2d2183c5b3666022d9e6aded346840acdc8ad7098c051f","ssdeep":"","tlshash":"89d0956a416d24c111474a3201cc1ccce534c443d4118c45d85acdd04b016941167f1f","first_seen":"2026-04-10T18:27:29.139334Z","last_seen":"2026-07-31T10:41:31.651634Z","times_seen":85,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/plugins/wp-meta-and-date-remover/assets/js/inspector.js?ver=1.1","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:47.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-content/plugins/wp-meta-and-date-remover/assets/js/inspector.js?ver=1.1 HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1321\r\nlast-modified: Wed, 12 Nov 2025 07:50:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbeF5B5nr4EMqKymezRYng4wYdEt8VbnXddva09qvoG3aZxktdFIQ%2Bh1zo1kRA9Lua3HNCnL8k5N%2B11CrAA7%2BDRYNSeNWQaLUsmy3XS2DXJHe%2FsrVkHodJprKxoB8%2Bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f995b220b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4316,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c39c8ea6659fbf8cdded118913e96ea3","sha1":"f48f56843097b2a6efa40877954b8de444765111","sha256":"cff9ed2f1fc208cdb20cc7bae599161e38c10a95ab6e6801a7047f358f03b007","sha512":"9bb1c7f6b6d3d2855ed0da0d87b4535272a017a432cca096970707b5c346b54234867cfc523c09ddd367919a6a52c68b6a29cd25527caa60c01877f105e8b956","ssdeep":"96:2SADHHvyai3nPMQrhL3quPTpgQkQ5RAlv+LQCC5kpHkWtCzw:2SA7P7i3PMQrhL3quPTpgQkQ5ulv+LQa","tlshash":"30915e0172be2239622fc5af088fd14db355048b194c6d12bafc1712af65f7483e3ae9","first_seen":"2024-07-13T16:04:00Z","last_seen":"2026-08-10T16:06:19.731089Z","times_seen":2725,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/themes/occasio/assets/icons/genericons-neue.svg","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:48.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-content/themes/occasio/assets/icons/genericons-neue.svg HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7800\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 05 May 2026 13:54:48 GMT\r\nlast-modified: Wed, 12 Nov 2025 08:04:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aP3BEzsslCti5Uqyo3uiLPYZF4z0oD6VTYs2X3GuTPvw6zEvLL%2BjO1bUFaECknM8caJOIFhjpU2mO%2B%2FiMpXXHG%2FBntPha%2FBaxXq8NOCscXUPveJtNYxpWD9WosVFw18%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f9a9c4e0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":28006,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4080d1f5f976c56fb30f2150d520c49e","sha1":"081eebd1ca84882c6e51e4c7c57c8bd1c89f7c42","sha256":"1ef564b89fc8b8baa6609f30535c85a5f7e793f16879169cbf7a8987fd85405d","sha512":"0fb5fa9453b4bd8c7c39b7db5159bf8eec96ed8c6d44173f6daea97735375b1bf5b37024db8c893a89c0c339413f1ed750a54ff6c33a46bfe0fab0e066351d4f","ssdeep":"384:53STd/4U+TKvHntTpx1JjDdGs+QF3JfEvLPv10saohRFfDd:EZvJrDZ0jaSrd","tlshash":"02c212331366b786e984072561c460c9b5e4ccefa0f0a1b4ba170a5dd19e0e5fafc7b1","first_seen":"2023-04-07T11:16:46Z","last_seen":"2026-08-10T22:18:04.997695Z","times_seen":1351,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/favicon.ico","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:48.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: text/html\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1s5SjO%2FtpY7tKvNPkf%2Be%2FuKitPuxOG%2BwU%2BwrWuffU%2FzuxiLXMQnHXkDg3xnFqhBk1XTX6C%2BowS1sAsgKCr48WLdSqeAAMsCKHJPOU0fdBvqkWZL6dry8lYI4Brv5q70%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f368f9bfd780b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-10T21:50:56.101175Z","times_seen":148741,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/uploads/2025/11/galabet.png","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:47.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/galabet.png HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 14865\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 05 May 2026 13:54:47 GMT\r\nlast-modified: Wed, 12 Nov 2025 08:25:51 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29T7E0XZt%2BZ3ThCWflivZ%2Fho8l8znup5sClB3BtSa0s9RIgKYJxKzpKajHBhfB%2FXmWYv%2FN4tXm4aZO2Dte6xdqWaXRE3SzKBrPQkUdhWpVzzMde%2BmF%2BxEXHECXdyt4w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f995b200b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14865,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 4-bit colormap, non-interlaced","md5":"9128edbe7e7932b444ebd82e9457ea28","sha1":"75877119d36520808eadcea5a9a45499b2c12e9e","sha256":"b124aa701214382b3c709a475fd210d8a5475fc058db61369e832f48709896e9","sha512":"86287c874abc9dabed039bed5149cdf92509b5faa982d245a2f8c52c6ad6de8346ad45a86211d18256113f75c93ff6f04a589a95eeec1d58bef8adb789271a56","ssdeep":"384:DOSKmdsgITnliJmUekPUt1h9QzBIVpOFS:WmdsgIpEObAzEWS","tlshash":"a062e0a6b0e3fdb40dfe3c16a92f4726843dc7d924c85dc779a850a3db7ea9da160010","first_seen":"2026-03-29T14:14:51.808526Z","last_seen":"2026-04-28T14:28:59.719412Z","times_seen":5,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/themes/occasio/assets/js/navigation.min.js?ver=20220224","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:47.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-content/themes/occasio/assets/js/navigation.min.js?ver=20220224 HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 576\r\nlast-modified: Wed, 12 Nov 2025 08:04:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icuBxf5hJm4cTqR3TRma0xdmJSDwAdoAgY1zqB%2FG0xnHhoLHBdE%2BssKS3uuMzfV26jhYaxsxjqg%2FEovCX90X2zMfalsMRP2CKWmnFNMuIx3EIkchfuf0MycxCymmShE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f995b230b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2061,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2061), with no line terminators","md5":"2605713fb8d91ee848e8c40eaf049adb","sha1":"6aab26e797557881af59647d96c09514a05c3ab0","sha256":"cd57db2492c5251e291415c0c3c08317718b634d781f56172e0b114344cc8e15","sha512":"468f7a7aa8ea0a3ff691bc32e575623693bb4b3eb32a4662e3d8390e14107a148c55f536187ef1ee2a8012edb2673a2661f9d065d1f23066565ebf0f8835d36c","ssdeep":"","tlshash":"c741e3ba391d27370cbf35e3d0ff75c53a76246ce88240116059c85d2de4e9106ba9f8","first_seen":"2023-03-10T09:51:08Z","last_seen":"2026-08-08T08:08:54.9245Z","times_seen":59,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-content/fonts/barlow/7cHqv4kjgoGqM7E3t-4s6VospT4.woff2","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:48.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-content/fonts/barlow/7cHqv4kjgoGqM7E3t-4s6VospT4.woff2 HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/wp-content/fonts/b4dc100fe82a01955a822816e1a1e62a.css?ver=20201110\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14836\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 05 May 2026 13:54:48 GMT\r\nlast-modified: Wed, 12 Nov 2025 08:05:59 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C88GnDlqWtG9geITD8bVsA9xdeztxZYLHwQcG38m1PezzN4BJJeDjaewR2%2B1PxAkCfQ45e%2FZqRuYoIbX7P8nCUfSCNX8EjXskYtiOtcaMgm3bJbzybH0kzhC%2B%2B2JIs4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f9abc730b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14836, version 1.0","md5":"9b01ea2f83b1eb5056dac1d7eded9611","sha1":"9a604c1650a0d230c1e32b80760d1c40fca6975c","sha256":"88c786d5fa8700a201615bc7b8ede09d209ec5d08cc3dd0a30ea1c4baff3476f","sha512":"6c3452cf10ef95efbf7203ad8d08ee35b56d8f7019c738523b00cb5cd97b2dd8fb67a624a49921d5558f0ae0cf6fa5b69328af0a603db334b0e64bf1694950a9","ssdeep":"384:DdziunGYAmQwCjuOTmlcuGbmWn4tnhHdPNN8:pGuGYkwGuOTmlcrznOnhjq","tlshash":"c462cf90e701e132d52851bbbaf34f067aee4b9016cf09d61b8ab6d01a59d0461ec62f","first_seen":"2025-09-18T15:22:15.566412Z","last_seen":"2026-08-09T22:05:25.326866Z","times_seen":596,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabetz.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"galabetz.com","domain":"galabetz.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabetz.com/","date":"2026-04-28T13:54:48.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabetz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 09:00:22 GMT","end":"Mon, 08 Jun 2026 09:59:11 GMT"},"fingerprint":{"sha1":"92:E2:B1:35:5E:65:98:D1:C3:29:26:2A:FC:67:B9:87:DE:16:70:E5","sha256":"53:C5:08:A2:71:8E:0B:A6:1C:68:ED:11:37:70:D9:94:E7:CF:CC:31:63:7C:9F:74:27:1B:31:D6:09:16:8F:DC"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: galabetz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabetz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 13:54:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4949\r\nlast-modified: Wed, 03 Dec 2025 15:23:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hGGbLlq79aDY00OiIoqHjbVEer6r9jiLA5Wk15abX6bKsF21A2t4EdSZGup2w9v2JKdaIrgAYrmI8x9p3tg7VnlP6KpCFjFXQcmH81nnJ2WvHmhx0tAn66NzQi0oDYA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f368f9b3ced0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-10T21:56:23.658019Z","times_seen":310821,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"galabetz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-28","alert":"Phishing Block","trigger":"galabetz.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}