{"report_id":"54262b2a-42ff-4bde-bc84-fb6356c5765a","version":6,"status":"done","tags":[],"date":"2026-04-20T09:59:26Z","url":{"schema":"http","addr":"galabets.net/","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"galabets.net/","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"title":"Galabet - Galabet Giriş - Galabet Üyelik - Galabet Adresi","dom":{"size":30406,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9892)","md5":"cd7294e86dcf0c184197f55125e57a1c","sha1":"9a7365df4b92165ff0ec5f5b98e2b3e2c3986f16","sha256":"afac0b3d5eb366d8018a5b9140eba7f6984870c6815d76d87523e073a981afec","sha512":"310b4ac167bba8e974eb2f4aa4dc9c65498ee1abbbabadde3849e06cc05b8160204ef453a868bef6b3f2590911cb2e336ca15cd6d55286ed875098691cf848df","ssdeep":"384:7EJUR8E0ynwwZdqZUaAekWnypWU0QOwIYrPXhqdsXoFq8XQa7V:s80yZdapNnAw0rPXwdsXoFq8Xl","tlshash":"b3d2f876929a153b770e97ee8085732caf7a8614ce01f26671f7765c96a4df300b3a0c","dom_hash":"domhash79c944b569d13ba00889c14c9fde18d6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galabets.net/","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-25T09:59:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"galabets.net","ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-10","domain_rank":0,"first_seen":"2026-04-20T09:59:27.909978Z","last_seen":"2026-04-20T09:59:27.909978Z","alert_count":90,"request_count":18,"received_data":5091433,"sent_data":8372,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:21.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Underscore.js","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"WordPress:6.3.8","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Understrap","description":"Understrap is a renowned WordPress starter theme framework that combined Underscores and Bootstrap.","website":"https://understrap.com","common_platform_enumeration":"","icon":"Understrap.png","categories":["WordPress themes"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"galabets.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-22T05:24:05.50246Z","times_seen":403184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.0","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04dd1ef5c67998d8652330c0441689","sha1":"5e6ff5bd5240181a8bdea983837f39ac231dac4d","sha256":"5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164","sha512":"15b29b5a106ebad320aa419675e1d7415b56276ff8ec04b8dcac845630fdcaf3ee7ca7b9d614ea415d3facf065c2608ed62359d3ccae510f5527b2965c8d7b06","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKk:/u1zNwcv9qBy1HOg8SMpQ47GKk","tlshash":"6e83f8df77ca702247ab30b9406f550bf276199d684d4400f259d8e9bc78a4a823bf7e","size":87482,"data":"","first_seen":"2023-06-13T23:41:38Z","last_seen":"2026-07-21T22:53:16.156678Z","times_seen":32948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-22T05:24:05.591436Z","times_seen":903053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-content/themes/understrap/js/theme-bootstrap4.min.js?ver=1.2.2.1687283286","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b804d5c2473b2860099814d2be4d225a","sha1":"e84afb70e9deb4798429666ba8eb07ffee5bfab5","sha256":"eb8d76f400cf9a15206e7c0fbdab48ebc98c7ff7fa3b0ae1a3432528fd0efcbb","sha512":"7b9c1bd8d849657d6842ef39a0274f23810ba84fb6a00253dec3adc647fdceaa210a506f58b6982b61d40762aea1323bde8888294f0082484b6ca1f93422927d","ssdeep":"1536:k+Pp5mK+Wbbv9xOEhQscqZXvLvIWDKLn2:f9kEhOqZXDvx9","tlshash":"2273d54a3254b47306ee55a78077460bf7366898b507802cb4acacde2e7cd9532b7f78","size":77747,"data":"","first_seen":"2023-06-06T06:58:32Z","last_seen":"2026-06-23T10:48:24.572736Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6be0c336f3f594b975cd574fa0542fbb","sha1":"155878cdb9d523e95a5910de5d2f8f4c0bde342c","sha256":"35786e2290794fde30798e932cce00e442ab575cc56a560d5ff3e000c41e32b6","sha512":"417d4d02286da222edbddb484415b2ef70e82808d1c013e37d95054b82fbed15adeb46929ad1d55af3c7b35e669223478d949759b892189d49ac7ef059acdd01","ssdeep":"","tlshash":"746188993779388b317b14e3aa6f0e0beb7654271684d034c9baa7141cb14a3c379d89","size":3284,"data":"","first_seen":"2026-04-20T09:59:32.513298Z","last_seen":"2026-04-20T09:59:32.513298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"galabets.net/wp-content/uploads/2023/08/onwin-kare.webp","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/onwin-kare.webp HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 444012\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 22 Aug 2023 15:59:21 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sv9RNP6j7aIfsiT1xfpZvguFVjlpsfpgA5AENqmxIq3KrxurV0EYRGKA8vYR9mWDjUrowNEJreS8Y8NqqYRTOW9zRiMzwmGXgqD7oulDuVDfdiS8mU%2FhNAgEDFYiYxk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d6af349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":444012,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b1333bc3b333b3a36155e22d3ac165c","sha1":"7ac7649ae113d7ae380b7e4fdde6d820b94af0b2","sha256":"f695d999fe9eb183189cf9a55cb45297ef96f6bbadf676699b992cf9b499720a","sha512":"8b787791235a799e865513c220df75bf97e670e24c651d20d610efc058848f0a4649485f3ace5f539dc0deedd82e2490394ca53df05c54ed8e865c06bb78c6d7","ssdeep":"12288:jlc1BtK3NsEkgyFvsxiSsDl+IJtIkOTMh4SjS4AcSuO:8jKNNkgyFvBHxZJdOn4VSuO","tlshash":"7394233047cb9558d1f358bea682334afd3fcc135c93ea99651a3983c4aab36f248574","first_seen":"2025-11-26T23:09:35.730209Z","last_seen":"2026-06-23T10:48:24.574422Z","times_seen":4,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-content/uploads/2023/08/parmabet-kare.webp","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/parmabet-kare.webp HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1091126\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 22 Aug 2023 15:59:21 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fe0YXW5mEVQOYq%2Fn5Ft0T%2B1QAtHTuA54KQF31T70dekJKXDhX%2FCEMvBTx7U3Fl%2BoUcqg3dvqeMqPt%2FV%2FPSQk69uABgcCXM4vnYrSg8pEGruK1%2B1FO0V0xMQwIZQfzRM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d6af649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1091126,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26fcad296378b2d26f3f7013e84d6d47","sha1":"20d0f4ccf4a7334e276d72c8d0ab5f7d566df10d","sha256":"ec9e05203149f79786e624d386af3b902282f5c990214cdb006f0f137524231d","sha512":"342536ce5c7cd3ea5920501202646525c14d0dd874b34b6ecc25f4cbf3c7739b831d7ad5bdfbd36205189a502c43d6df1a0060b047bb4cfc8c9cdba5e20ccef6","ssdeep":"24576:NJl4hJYGSB/9MUcDhXAfGhRSXYXwxWM75Zz4n0A:u/HA/ViwGhAXYAxWQB4nv","tlshash":"3d2523fbabd3e444e17ba4b7f7543112f267c88bba558b6201167c13382a366f6117a0","first_seen":"2025-11-26T23:09:35.710722Z","last_seen":"2026-06-23T10:48:24.5691Z","times_seen":4,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-includes/css/dist/block-library/style.min.css?ver=6.3.8","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3.8 HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gezbtDuM%2BqyL8xB3WleUPldQTsoLn120f3uaFVpcvsI5SpsOqUtypGumHEhWfbdzXiEswmRZIEBXYOjw7L5pIEz7abm0Ro0ReeB%2FJntGKcBgB%2BMmersgY0qSseK%2FQZ8%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 22 Aug 2023 15:48:11 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d5ae949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104484,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53449)","md5":"03c0f2128c8dd615b1691c168f1d4456","sha1":"defa44bed1f35ec899cfd358ca911390bca53e67","sha256":"67447c3656caad630373253691f3e8f64467eafd6e7305c9b0e98111b0b41694","sha512":"01485475aec2d490e75dc76aea6e011541edcff527e85a773644accf101175b619e10b4d3a5cdb5926669559782bc33df483fe9cc3de9d3431e08123ce5d0853","ssdeep":"1536:6LeJFfvhk2u5SOV+UQ3Zo/xHHbweEEQze:6LeJjk2u5SOV+UQ3Zo/xH7weTQze","tlshash":"bda3505413b0dcf939ffa73a5e5ee248a513aa41c64a9be7e076d190614ca490cf3b0f","first_seen":"2023-08-08T23:54:07Z","last_seen":"2026-07-21T22:53:16.164351Z","times_seen":18038,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-content/plugins/AR-adsforampv3/css/arbettable.css?v=1\u0026ver=6.3.8","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-content/plugins/AR-adsforampv3/css/arbettable.css?v=1\u0026ver=6.3.8 HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RBeUyU4LHaOVkGIaI7U8CZg6e28eJ1hZ%2BftTSuNHpem0%2FlcuQuGyg5lZ6P3u%2Bs3SDac1OmXVgaXAQx0lkMQB3%2FCqVAI8b1Pv%2BWHH5%2BmHwnGF%2Byevn%2BjNKr0jU4SB%2F1c%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 20 Jun 2023 17:47:41 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d5aea49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3687,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"01408fff070f18fe0e42a8b4f8703d2a","sha1":"2964765b5ec39214b65e2735f387b6cb3ad8e849","sha256":"085f21072a8994a8e5bd8e4b1f611073539d724f27f9bb96c065f36e3c540561","sha512":"ff5a075e8be5f9711a2ca9d4e265f4650c39bb9381471186413edbb189f29635af4501ae93dbe87d300435b0db64c20d25c0837760684faa1637bd109fdf0fc1","ssdeep":"","tlshash":"c1710192c37f3846b112d0123f9a57eb163cd017eb378d297a993518cf8e18817b1ad5","first_seen":"2025-04-17T08:29:59.856567Z","last_seen":"2026-06-23T10:48:24.587013Z","times_seen":12,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-content/uploads/2023/08/neyine-kare.webp","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/neyine-kare.webp HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 503616\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 22 Aug 2023 15:59:21 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lj17yUXsLwEndw6os5IZzL9bS%2F6q6IhxbsIOLju283KKnzSTW%2FmR2C8QH7ikkvsEspgwrZNys52N1tACcAaKoY5K8%2Fvaieit9XTym3NnfZL0IVwynjfboDY6cpkfANY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d6af449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503616,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e8a6c2a9a97e2c91dd5dbdffe4e4eda","sha1":"ec6606649eeda7de1793d78daa003fd86539c783","sha256":"9b9144858ea4bfc6f74a5c90457c2273458aec4f064ec666865b7391c620151f","sha512":"4faf99bf1570f9b563591721b7cafafc6e641dbd45f08153c3f282666980ce1a5a5b8f0e130c022c0a4f6a76ac7c28582e7f19fd15dae13e2403a11290e0b6c5","ssdeep":"12288:9LVO+Iv/YK4s6QVSO3t6jUg6LZe/niZlIuJbv85GIKn/zt:n/g/7uO35vLFDIutLd/5","tlshash":"27b422edaaa0f055d072a03b9bd8663bf413890f9d6d8640354e34677f6c302fa2db16","first_seen":"2025-11-26T23:09:35.719168Z","last_seen":"2026-06-23T10:48:24.580687Z","times_seen":4,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Mon, 20 Apr 2026 10:47:04 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZjec997Uh7fKeIrP90pflcf5gH18%2Fg9KC%2FZMl0%2FMQ9mUgFoD8G1u0VEQIyHsrAXf3P1dIlfbJVbmwDen67JxDkhp%2B0mWYTXwChq07cWTxU87Szdo7AbS3%2FTksZJV6w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncf-ray: 9ef34b4d6af949c5-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-22T05:24:05.50246Z","times_seen":403184,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.0","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.0 HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sq%2BBYsB%2BRXxgcNuHx54YmtOqVkZMXjcED3GCxpHE4c5ElMMktvTb1wJfCgkwvYCnxarpWxeJHxUlpni4GbCRzSdKUDMHphXJ0GjJZPau3SWArg%2Bl7PfXCHQBKp5Cpuw%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 22 Aug 2023 15:48:11 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d6aed49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87482,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"ff04dd1ef5c67998d8652330c0441689","sha1":"5e6ff5bd5240181a8bdea983837f39ac231dac4d","sha256":"5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164","sha512":"15b29b5a106ebad320aa419675e1d7415b56276ff8ec04b8dcac845630fdcaf3ee7ca7b9d614ea415d3facf065c2608ed62359d3ccae510f5527b2965c8d7b06","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKk:/u1zNwcv9qBy1HOg8SMpQ47GKk","tlshash":"6e83f8df77ca702247ab30b9406f550bf276199d684d4400f259d8e9bc78a4a823bf7e","first_seen":"2023-06-13T23:41:38Z","last_seen":"2026-07-21T22:53:16.156678Z","times_seen":32948,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-content/uploads/2023/08/olaycasino-kare.webp","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/olaycasino-kare.webp HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 773518\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 22 Aug 2023 15:59:20 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nmtKg91fbKCbwPgCQUZXqkjTMqI3RJ7ay1q8ojPPMzHq2zD3jJljXRxwHOonMRVjAGIA8QlFEFwdHaglGJyuCL7%2BTcMOvGnEyJPRj7eRf7BY6lJdFUtekoyFbgNRo0E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d6af049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":773518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab62e70d156b446170aae196a1ba921a","sha1":"9650302d5061ca92a9f1b0c987cf7329b20e74b3","sha256":"2698aeab9d751841974dbe88889ff7ecb6ceab929094a3909ed4200ecb9179c9","sha512":"2ed58a32d1efd3de2b970c86715f014149ec14fb2e116f55f464f556b679cda2fefbeb007b078507f450971c3d4ac60b9700c1376b4d656f647761314707c270","ssdeep":"12288:sYux1JyyClmO6AbG9ruhr9T3QVbk8Wnf5gcugscRnwqDtTlDH3oEAa6xzc:sY0uljbsSr+af5ghKe4d16xo","tlshash":"e3f423daf3ebc549f099a437cfe07352b4a3c91fc586c321559abc16aa38712fa0c560","first_seen":"2023-10-15T13:39:14Z","last_seen":"2026-06-02T05:32:30.516496Z","times_seen":11,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-content/uploads/2023/08/favorisen-kare.webp","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/favorisen-kare.webp HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 130014\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 22 Aug 2023 15:59:21 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=15msY3cJDK8V1Ed5u3U8ihju%2FJS0Xh9z6nBnGgm%2Fw3hLfobTWNx7rodaw04hN5kgDqD3nIGKWVQUDl%2B8wQWNnb7ZdHXA9Mn1TepP6NZHsAYTxAKc8GN0w3QZXkMttF8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d6af549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130014,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c4f731f87f8d60e6b95573e9a3d65715","sha1":"07df1046d509de4d4f9000787b949c10e74db648","sha256":"991f1e86f6ce8b3dbfd37c318affb6de94ad18df368ce480547c734e2c549503","sha512":"5d4608cfb75575d8c7aa855b7cd717e98341924cd6a4a2215a4afd3940b299a6e94d0e9d1c778b33b5269557bf325bb52537fabbb04c42ffd6cbe5f23b660bfe","ssdeep":"3072:HBIwvuUqV9DiFGBOGco5cSD5jjxGUR1IgYnKe66ZidInLJ9zXv7K1:HBVvuUqV9Ggc0xgXKOA0LJxC","tlshash":"73d3f1ebfac3e941d8a0207ba2162949f5cbaa0b45e4c419e1437a73b13d645f34f3b1","first_seen":"2023-10-15T13:39:14Z","last_seen":"2026-04-20T09:59:32.501583Z","times_seen":9,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-content/uploads/2023/08/supertotobet-kare.webp","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/supertotobet-kare.webp HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 354856\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 22 Aug 2023 15:59:22 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0xS0%2FmKnuFTDdAN3kN%2Fs6yKPaykWWj0Ygtqe0xa1sziN2%2BWFBVmwBcaEBsVP7aZ%2FksXxud%2BHjrFAj2ej7HKVMofysDGVaXQ1ufukQmhlTORvZ9p4co8IhcuXbXtS%2Fc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d6af849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":354856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"851308dff79fb5107b9f09e09703d1b2","sha1":"210e16c86b6dd599138ae6657b4bfe004b9cf7c5","sha256":"59cc2caa3e1f5b67cb1bfb7587b6b85a072fd39f940c7480c07ba47d346f3f4f","sha512":"2fb061d3ada9f1e2cd46ff17fbfa8bf6220370ff62225b737a8b670f3965dcbb274077b7bd37dab10df382cb350709a32f4a59ab92912fcd5ccbb57cc18bca3f","ssdeep":"6144:tb5CY829NRsgdU647zkivqq9105dsH6k58FLequZYokosevM:zCDssYD47IivqT5dm6hFLCaocL","tlshash":"d37423b6927ecd24f4b9963f56e9f48274532d132a7c9506c30f6229e13c3e0ea825dc","first_seen":"2025-11-26T23:09:35.731777Z","last_seen":"2026-06-23T10:48:24.583089Z","times_seen":4,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/favicon.ico","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nlink: \u003chttps://galabets.net/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://galabets.net/wp-includes/images/w-logo-blue-white-bg.png\r\nvary: Accept-Encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bf0BxKPyM4xu2k3xnh6I%2FTXfBoBiudXBfmSQCaZwxrFbOpKXE7A3AmsNGuxpNZ85lJLM0zbo94NAVpQoiQGobqQCiKs4YjzBD5AGMZ3QQn%2BdZDaGtt%2F3JWWaCCW6L%2FE%3D\"}]}\r\ncf-ray: 9ef34b4ffb4549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T05:24:28.82285Z","times_seen":17441673,"resource_available":true,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-20T09:59:03.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://galabets.net/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YIivKLJO%2FF%2FhDXeW6JOR2hEF2UJsJs29Fd70QgH%2FwefRkdYKDk%2BFJh0xXpvuvr5Jbi%2FHR2tIQo%2Ft23BOEkTClRsnAxwtxW2ny7aVOT2wCqrwwz1%2BUyuVLah3cGMMPpc%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ef34b453ece0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:21.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Underscore.js","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"WordPress:6.3.8","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Understrap","description":"Understrap is a renowned WordPress starter theme framework that combined Underscores and Bootstrap.","website":"https://understrap.com","common_platform_enumeration":"","icon":"Understrap.png","categories":["WordPress themes"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:4","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":30836,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9892), with CRLF, LF line terminators","md5":"a84a6c172d6423dde2859bf3015251ad","sha1":"a53c168a3219b7eb23f70cba2965cbce4a000ce0","sha256":"aa70771da850a357d5d8dbc394a720d340b75dcf7a673e3626caebbded96fe17","sha512":"f68e3e63f6aad046bab462ce04ac7af00a272aa0ec8dfdca28f751ebdde454b8354ad38fcaebc7c4e8031f82092a2df354924dda6412ab06ffbb717f3e13777f","ssdeep":"384:5EJlu8E0yU6wZdqZUaAekWKqUNLwpKOwIYrPX5BdsXgmq8XoLzKwQEg:qu0nZdapNKXNmyrPXDdsXgmq8XT","tlshash":"58d2e8b6d2aa153b770f97ee8045722daf7a8618cd01e26570f2765ca6e4df300b360d","first_seen":"2026-04-20T09:59:32.505087Z","last_seen":"2026-04-20T09:59:32.505087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1188,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":1139,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iIgsWbnpgPams46tczAS%2F9m2Vq0EFtqwelqbt%2Fp2nLgAtoVM2YPRe6LMr2kF1zvzctdIiZqWJtNzKnqwZafS%2BtBlJYl26IZrH6D1m4Qbb%2FYrkdpFr7eEEmji%2FP88zi0%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 22 Aug 2023 15:48:11 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d6aee49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-22T05:24:05.591436Z","times_seen":903053,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-content/uploads/2023/08/celtabet-kare.webp","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/celtabet-kare.webp HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 880056\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 22 Aug 2023 15:59:20 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZvNKmDQZ%2Bxp4ZB4zQHQh1ZTS9v%2F1CrfHqQhzM%2B4purIBj31apz%2B3htJkN9f834e%2Fzv8ZFWeHDp70TcUIHQ4LnRMEWvW1%2BTSiUn5kMIfBG7J%2BhzprLm64hGWEgOQRpjI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d6af149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":880056,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b91012bc8558d31b9ed0b73b2f8c0f05","sha1":"9d33931617a7cfc8b85f226a4ce052fb4c8d4833","sha256":"71f5fa617cce4453735473fbc7d57cc40cf5d4a8a507f6a66e4a6c055c4b3b8c","sha512":"7a552f6650aebfa5c70902bfe32d61ad5cd99befa228a10f0cada0fd6e89c7fd5f2aec6415f5277098e2ca266b44c580ca036ad4c45ad621c54e087931400eba","ssdeep":"24576:/L73eq/a5+93iYSV1QUX5OSrtXgCXBlTPiew43b:T7OqCpYApOi/XBlTPtwo","tlshash":"e61512fbeb83c190c4a52a7feb547085f4838c4f99e6c601065af552373d26bf31a266","first_seen":"2025-11-26T23:09:35.728151Z","last_seen":"2026-06-23T10:48:24.577253Z","times_seen":4,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-content/uploads/2023/08/matadorbet-kare.webp","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/matadorbet-kare.webp HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 288016\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 22 Aug 2023 15:59:22 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ga3ebehax8vAyrx5123ZKtY007j0sPZFrsRMgfhftm10RFFGRV5ck%2Bs1Bm81lrZ1xqCTc9eWQE5Ti3c6oVAJcBAphLYXjC83tLj4RvWwnN%2FQzEU31cjom6oor%2BoNIlI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d6af749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":288016,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75b632657f0fe28c8a50f5c7c1aea238","sha1":"00e96a1209fc4927ad22aecd63bd60a3b9ce6cec","sha256":"321b9ad1a27f8241ca6d4df2d237c726fcac00f15bb316753bc5091ff61b47cf","sha512":"a6df93d33e7382c68af84ca4644f09d3fe08fd265f1daac4b9b17d01c88c8ceed4bcc08e37ca7d6eb8a5876d5a54723b580f5858466332cf669387751fa1071c","ssdeep":"6144:gOf3mT/cj03edqmSFGBuRH8ZEPTP5l2L2oyq56xScvXEGoe:N0D2qmejHYET5l2L21q56WGV","tlshash":"4954127347e4e94dcef9a8b3c560651b720b895aa2788604ea1f7957fcbc7b2f200744","first_seen":"2023-06-06T06:58:32Z","last_seen":"2026-06-23T10:48:24.578426Z","times_seen":12,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-content/themes/understrap/js/theme-bootstrap4.min.js?ver=1.2.2.1687283286","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-content/themes/understrap/js/theme-bootstrap4.min.js?ver=1.2.2.1687283286 HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qDXpcA4ZGkpQ8qkhhxEkQqd%2Fs5vrqyagpzoO7uPyydUlFKE6C6WoRTYWFxA7mfULnMQu%2BMmNpmYU25udLZBByTmcKv3Yy3k7qJ%2F3HXfL%2FQIh%2BFil1OxZbVMUE%2BkWBDQ%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 20 Jun 2023 17:48:06 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d6afa49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77747,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (46097)","md5":"b804d5c2473b2860099814d2be4d225a","sha1":"e84afb70e9deb4798429666ba8eb07ffee5bfab5","sha256":"eb8d76f400cf9a15206e7c0fbdab48ebc98c7ff7fa3b0ae1a3432528fd0efcbb","sha512":"7b9c1bd8d849657d6842ef39a0274f23810ba84fb6a00253dec3adc647fdceaa210a506f58b6982b61d40762aea1323bde8888294f0082484b6ca1f93422927d","ssdeep":"1536:k+Pp5mK+Wbbv9xOEhQscqZXvLvIWDKLn2:f9kEhOqZXDvx9","tlshash":"2273d54a3254b47306ee55a78077460bf7366898b507802cb4acacde2e7cd9532b7f78","first_seen":"2023-06-06T06:58:32Z","last_seen":"2026-06-23T10:48:24.572736Z","times_seen":28,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:05.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabets.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 4119\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 24 Feb 2023 02:06:17 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a12WfQqmSTNlb%2BnCvsv5IujbhiLgc2HVIXZ1xwACdCYdMtA0hsPYg7Rb86FENrWDqx8SqjrqRk5o87phTVhSFkDAQqP4h9pNJlw8YYIxPacwJuDNIzNPKgT9vlUZTmA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b537ba849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-07-22T05:16:08.359484Z","times_seen":71530,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabets.net/wp-content/themes/understrap/css/theme-bootstrap4.min.css?ver=1.2.2.1687283286","fqdn":"galabets.net","domain":"galabets.net","tld":"net"},"ip":{"addr":"172.67.186.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabets.net/","date":"2026-04-20T09:59:04.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabets.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:35:30 GMT","end":"Sun, 07 Jun 2026 21:33:38 GMT"},"fingerprint":{"sha1":"FB:90:C3:6D:99:9B:72:4C:AF:97:35:55:08:82:38:05:B3:F4:D0:B6","sha256":"95:FE:84:F3:DC:7E:55:6E:CA:02:E3:16:14:46:92:9A:46:0A:A5:1D:0C:57:B8:D0:C7:4F:39:F0:24:49:10:E8"}}},"request":{"raw":"GET /wp-content/themes/understrap/css/theme-bootstrap4.min.css?ver=1.2.2.1687283286 HTTP/1.1\r\nHost: galabets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabets.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 20 Apr 2026 09:59:04 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQ4kqvxSaPu3q1Q1xZA%2BgdGPTVQCL%2F%2F%2FPTpm%2F%2B3GUIybqeo05PFS9LGmRjxYp6uHnHu9DFvPCUq%2Bs%2BX6zWtzZ23Mvrk8w3OxKwEmXGRhFel%2B014V9wdkqDAidWbsWjQ%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 20 Jun 2023 17:48:06 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef34b4d5aec49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286617,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"82231992ea1406d5d184a193bbc30d0b","sha1":"6b5bea3f615b9d7957fd0badc33e72f6e1941102","sha256":"23774fec3cc4d69fc1e50b60832d8a5a04e02ee30108379c8b6c64dba7811a23","sha512":"7886b628c87abc6b55ad56fe1f615ac1fe5cc9a8634a38ff9cbde7265fa1606fac24bd9a7d1fab992238eb96af9195354f6c249312d4d4f343320c32fef7b3ee","ssdeep":"1536:EBXKI4LLA+rMqFVD2DEBi8yNcuSElAacpJpq3SYiLENM6HN26LbkR/4yrtayUz6K:YXEyWLq3SYiLENM6HN26g4oAye6JtVA","tlshash":"f3548462e01030e966f2c66b67c0fbda1d6b9124d9275ba1e01b5bbc47e81c71b72f4c","first_seen":"2023-10-23T09:01:41Z","last_seen":"2026-06-23T10:48:24.575929Z","times_seen":22,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-20","alert":"Phishing Block","trigger":"galabets.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"galabets.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}