{"report_id":"5ab92331-49d2-4af3-a294-65f46cb478d4","version":6,"status":"done","tags":[],"date":"2026-02-14T02:44:23Z","url":{"schema":"https","addr":"galabet-resmi-giris.vip/","fqdn":"galabet-resmi-giris.vip","domain":"galabet-resmi-giris.vip","tld":"vip"},"ip":{"addr":"172.67.178.20","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"galabet-resmi-giris.vip/","fqdn":"galabet-resmi-giris.vip","domain":"galabet-resmi-giris.vip","tld":"vip"},"title":"Deja vu Secrets","dom":{"size":1188,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c04414e8f1ab7c57dd2677f9c3fc5e7b","sha1":"c2d136c847a9cbba726793b3bfb6572ffd9eb066","sha256":"d76e30bfd40c27c9e189b69d5289fb6c6cd239c83eee1570929bf512251f428a","sha512":"d977bbcde331dd606afdffbde191df00a1154acb726b5ab1324affabdb6ea2a3b2183b4c9f9d1065110e80af52f13dac054beb664464c0078fc26b92a7a17957","ssdeep":"","tlshash":"a021666124414c16b2918670d894be4444d3dd59d3879c88d1a7103f7df1e80c0a39ed","dom_hash":"domhash67923cc19bf5dbcd7854a33b05615307","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"galabet-resmi-giris.vip/","fqdn":"galabet-resmi-giris.vip","domain":"galabet-resmi-giris.vip","tld":"vip"},"ip":{"addr":"172.67.178.20","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T02:44:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"galabet-resmi-giris.vip","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-20","domain_rank":0,"first_seen":"2026-02-13T09:47:04.284148Z","last_seen":"2026-02-13T09:47:04.284148Z","alert_count":0,"request_count":2,"received_data":17844,"sent_data":945,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.dejavusecret.com","ip":{"addr":"208.84.101.41","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-03-04","domain_rank":0,"first_seen":"2026-02-13T09:47:04.285758Z","last_seen":"2026-02-13T09:47:04.285758Z","alert_count":0,"request_count":2,"received_data":669173,"sent_data":921,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"galabet-resmi-giris.vip/","fqdn":"galabet-resmi-giris.vip","domain":"galabet-resmi-giris.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:44:01.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-resmi-giris.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 17:18:18 GMT","end":"Sat, 18 Apr 2026 18:16:50 GMT"},"fingerprint":{"sha1":"AD:36:25:98:22:13:F4:21:A5:7D:F5:EF:4E:CE:BE:05:B8:58:82:14","sha256":"DD:64:07:D6:35:55:6C:E8:20:D8:41:00:22:EE:B7:9E:A7:DD:74:8D:46:22:90:28:73:8A:66:7A:D7:EE:4A:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet-resmi-giris.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:44:01 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 10 Mar 2022 00:11:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YP5QBU7np0OvU%2BJ1xOBfDhEhAmGlVJ9tdGS3ania7loJDlbm%2BLD3X80fn7AgG7CexrWoTBjQnJ0uP6FliynqApkpYPxskRlpzfh0vOGJ3Wzq61Z6fNoj\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd938a32af3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1166,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"ebc564402adec269b1dda7fec6222099","sha1":"ff114e6b092c7e1e6c54e07be6ecf30e7e8a524c","sha256":"594061c4c72c630deaae58ead00feb0faee06c4a6892882f5fb138e4527bc2f6","sha512":"3f031db8a839acf7bbfd534076aa8fe36200bc4b1009d7a98473f0ffd5a51d9b5113a7d31d757a707c179957dc06fc243b6b524ac01999d36376806694c85035","ssdeep":"","tlshash":"2c21862228405c1292828530dd88be4084d39e99e7839cc4a2bb003fbef2e80c4726bd","first_seen":"2026-02-13T09:47:08.08131Z","last_seen":"2026-02-14T02:44:24.811295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":44,"dns":28,"connect":1,"send":0,"wait":401,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dejavusecret.com/images/style.css","fqdn":"www.dejavusecret.com","domain":"dejavusecret.com","tld":"com"},"ip":{"addr":"208.84.101.41","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabet-resmi-giris.vip/","date":"2026-02-14T02:44:01.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dejavusecret.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 23:17:41 GMT","end":"Wed, 06 May 2026 23:17:40 GMT"},"fingerprint":{"sha1":"14:4B:00:05:4C:CD:BF:F2:7F:49:9D:73:B9:93:2E:B0:48:A5:36:1C","sha256":"6D:25:DD:6F:09:30:2A:28:07:8A:DF:C8:DE:41:CB:75:B5:D4:53:68:AF:62:58:7C:6C:A2:EF:A2:FC:68:AB:93"}}},"request":{"raw":"GET /images/style.css HTTP/1.1\r\nHost: www.dejavusecret.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-resmi-giris.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sat, 12 Oct 2024 20:04:21 GMT\r\netag: \"79b0-6244d1bfe5b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5231\r\ncontent-type: text/css\r\ndate: Sat, 14 Feb 2026 02:44:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":31152,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b3d54f4120eb1aa8c4d18208f8dafc90","sha1":"6a256ae846d40ff2c35e1bdcc39fd117561b884e","sha256":"92ebf8b36a59748355929ed63d4ace29d168d6b499ce94b37609f3c164383e8e","sha512":"bb2c3ed6e9d4584da49543d571f995a57a179563e85079345ce7b297ea4649ef5e5a542deb5578f017f6ce0be047741fad9ec85d5238be5369d52e433e6f9678","ssdeep":"192:5BNQV0BeOsLA9M8KCy88VqqegUUz+my38xBzbpjYqpWDNSujuQKapr33XUsjXhoU:dx9MEy8Thgc4Cc4V1Ydg","tlshash":"dfe24237ad086489b123e458bf0c7dd9666e0427ed6f8e3ab455353cfb4a8e80572b1c","first_seen":"2026-02-13T09:47:08.089499Z","last_seen":"2026-02-14T02:44:24.812314Z","times_seen":2,"resource_available":false,"data":null}},"time_used":914,"timings":{"blocked":398,"dns":163,"connect":116,"send":0,"wait":115,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet-resmi-giris.vip/favicon.ico","fqdn":"galabet-resmi-giris.vip","domain":"galabet-resmi-giris.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet-resmi-giris.vip/","date":"2026-02-14T02:44:01.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet-resmi-giris.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 17:18:18 GMT","end":"Sat, 18 Apr 2026 18:16:50 GMT"},"fingerprint":{"sha1":"AD:36:25:98:22:13:F4:21:A5:7D:F5:EF:4E:CE:BE:05:B8:58:82:14","sha256":"DD:64:07:D6:35:55:6C:E8:20:D8:41:00:22:EE:B7:9E:A7:DD:74:8D:46:22:90:28:73:8A:66:7A:D7:EE:4A:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: galabet-resmi-giris.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet-resmi-giris.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:44:02 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nlast-modified: Thu, 10 Mar 2022 02:00:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5m1RFZqhXs1Ttpjiodou03wCbQ0GTYyFUpcER%2BLX502WjF5b5fraIOq5lFSlZwYQJAQx%2B4NccTA7OJ1HG1FijVG4NRE9kLYWvkE4H9r66GlCuLp153o\"}]}\r\netag: W/\"3c2e-5d9d3942f2dc0\"\r\ncontent-encoding: br\r\ncf-ray: 9cd938a75a08b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"1c7ba2212d7c1c462c855b95687fe713","sha1":"8349fc49e4c10a2bf7140ed8a047771f213477ed","sha256":"f9bcb7446a4ed259cfb5159f6863dd8c381ad56f0354569513f343b920a5b895","sha512":"e93421d7f8928a47f4775315d80b06f70dc221dcd398a3b9b51d88cd1d978fe8a5407d67d30fc98a985432de9db6ead71b0c9f294b653830e53d38fae6ff9b6a","ssdeep":"96:3zLL9U0iCs5cs9LeoHvXiFASUzlMr3nIiF/2EdJ873xN:3z2t5zakvaP3IiFukJ8T","tlshash":"aa624b0bd3d6092ae6d04b3520bb87fb7e6bbd76719343460de1ce383e195922e89190","first_seen":"2026-02-13T09:47:08.073535Z","last_seen":"2026-02-14T02:44:24.813308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dejavusecret.com/images/Indonesia-1.jpg","fqdn":"www.dejavusecret.com","domain":"dejavusecret.com","tld":"com"},"ip":{"addr":"208.84.101.41","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet-resmi-giris.vip/","date":"2026-02-14T02:44:02.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dejavusecret.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 23:17:41 GMT","end":"Wed, 06 May 2026 23:17:40 GMT"},"fingerprint":{"sha1":"14:4B:00:05:4C:CD:BF:F2:7F:49:9D:73:B9:93:2E:B0:48:A5:36:1C","sha256":"6D:25:DD:6F:09:30:2A:28:07:8A:DF:C8:DE:41:CB:75:B5:D4:53:68:AF:62:58:7C:6C:A2:EF:A2:FC:68:AB:93"}}},"request":{"raw":"GET /images/Indonesia-1.jpg HTTP/1.1\r\nHost: www.dejavusecret.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.dejavusecret.com/images/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 17 Sep 2024 21:09:09 GMT\r\netag: \"9ba3c-6225719b42740\"\r\naccept-ranges: bytes\r\ncontent-length: 637500\r\ncontent-type: image/jpeg\r\ndate: Sat, 14 Feb 2026 02:44:02 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":637500,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1920x1080, components 3","md5":"ccb9ebcd1787426d2cd79d1c3ba9e286","sha1":"2f29cd93d1baba5ea8bc06ba3bcea95737da884c","sha256":"aabcd3d837ca2562a5417556ce54c10918030ad14b7d121083848a2240060f3b","sha512":"299812e5b3c7dde75e564096ebd682e1085e541e5923713bf0b518ced05b0b8f4757fc475791814b913799cf3cb2110fed94163264635a09f470ce735dc54dd0","ssdeep":"12288:nfJGxTi9zBAaZ94lEnsEK+YPSKOUPa4RaFq4CDlhqLz+xn:fsxu99A6Q7EZtWa4a0jqmB","tlshash":"dfd423ff3b7e81a289ec92f68487a784d76c44b295a92c75400c6687360574df8f9f32","first_seen":"2026-02-13T09:47:08.076912Z","last_seen":"2026-02-14T02:44:24.814335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":473,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}