{"report_id":"6a3a8ea5-cbe5-43d7-be85-372d02321955","version":6,"status":"done","tags":[],"date":"2026-06-06T03:00:02Z","url":{"schema":"http","addr":"casinogalabet.com/","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"104.21.19.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"casinogalabet.com/","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"title":"casloco","dom":{"size":5940,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5901)","md5":"f3dd4df9c8366e9bd950fb1b4609680b","sha1":"96b0cfef88bc57df6d1edfeb3ddd89bab02bc35b","sha256":"899a0ba949b692221976f77982ea3450ae3c591cfe5475de53e48be35633ac0a","sha512":"7aedf1226778cb7fbc3edf936be5a7329139737c8ff434c5a7f810f74e44046544ebf8f132a9e134c39c56981f8820214afcee313d9d453a6fb0784a59a4f7d1","ssdeep":"96:nFt61cIuO8XwdH9FSFQLy3IdyOR6dHUFxEBVxSIzXmXNL0f9wmlwwwjxDga5ZwxM:Ft61cZSxxVxxFT","tlshash":"efc1ff38f50d840eb19ba52469f4d5c9e3e4d913973b16ebe46f72a1c2c64ca09bdac0","dom_hash":"domhash44ab8997d6b69597df1361c449b1a1fe","first_seen":"2026-06-05T20:10:35.750207Z","last_seen":"2026-06-07T14:39:51.353488Z","times_seen":13,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"casinogalabet.com/","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"104.21.19.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-11T03:00:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":14}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"websocket-srv.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"websocket-srv.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"websocket-srv.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"js.intercomcdn.com","ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-25","domain_rank":23692,"first_seen":"2020-02-19T12:43:00Z","last_seen":"2026-06-01T10:49:54.544624Z","alert_count":0,"request_count":7,"received_data":4821162,"sent_data":3246,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"websocket-srv.galabet.mx","ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-20","domain_rank":0,"first_seen":"2025-09-10T16:40:45.616944Z","last_seen":"2026-06-06T03:00:18.080711Z","alert_count":3,"request_count":1,"received_data":894,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-31T22:26:05.480738Z","alert_count":0,"request_count":2,"received_data":483188,"sent_data":1823,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widget.intercom.io","ip":{"addr":"52.84.50.80","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":19213,"first_seen":"2020-07-20T12:16:46Z","last_seen":"2026-06-01T07:48:32.198556Z","alert_count":0,"request_count":1,"received_data":8367,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"web-resource.galabet.mx","ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-20","domain_rank":0,"first_seen":"2025-09-10T16:40:45.614706Z","last_seen":"2026-06-06T03:00:17.666265Z","alert_count":261,"request_count":87,"received_data":5063203,"sent_data":43383,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"casinogalabet.com","ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-02","domain_rank":0,"first_seen":"2026-04-22T21:53:09.458884Z","last_seen":"2026-04-22T21:53:09.458884Z","alert_count":1075,"request_count":215,"received_data":14228701,"sent_data":120952,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"api-v1.galabet.mx","ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-20","domain_rank":0,"first_seen":"2025-09-10T16:40:45.613289Z","last_seen":"2026-06-06T03:00:17.748909Z","alert_count":69,"request_count":23,"received_data":50744,"sent_data":13505,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nexus-websocket-a.intercom.io","ip":{"addr":"18.97.36.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":9252,"first_seen":"2015-06-26T10:17:57Z","last_seen":"2026-06-03T20:27:46.122871Z","alert_count":0,"request_count":1,"received_data":283,"sent_data":744,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"64.233.163.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-06-01T07:28:36.892124Z","alert_count":0,"request_count":1,"received_data":264464,"sent_data":420,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api-iam.intercom.io","ip":{"addr":"34.203.24.55","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":17818,"first_seen":"2018-08-02T22:07:54Z","last_seen":"2026-06-03T15:03:03.22256Z","alert_count":0,"request_count":2,"received_data":8777,"sent_data":1073,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.163.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e84bfd3ab4d0f415d70ad0bb1dc43c9","sha1":"cdf807b99c00272e5f44eb0c00e036f393e1a02c","sha256":"827d254fdc4266e693072d912ca8d392dc4ddc3c45953af91ecbea4a0b557c2b","sha512":"82bb56230e4b8a200728c35a409a0255e543d0863c1834e83b3dc05f4e48145281feee437980fe49228b01c83c75763d7ece380644384887159260c73dc8e9fb","ssdeep":"6144:TdjLQ7hxy5ehIJNeS/4MjtIwnB76iMWaKG0f4W4:Tpehs1/4MjesZJMWaKG0f54","tlshash":"15444adcb6e270315222f9b5d43f410ab076a669f0498cacf694c6f5acb1d890173f7a","size":263362,"data":"","first_seen":"2026-06-04T03:59:20.095311Z","last_seen":"2026-06-16T17:24:47.883196Z","times_seen":2040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/app~tooltips.ab7c6031.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a83f25fdf5907cf6f198753947d347ea","sha1":"c1425346088a2250f5daeaa9ea50d0aacb0728d4","sha256":"59c757f89ec70bb3c47bfc4fa91311552b6921fa3d13fb2f9be3feaadcf7f185","sha512":"65d2fc0974f4ea9928b0dd6a09edbdbe5c9a25f6492be77a54d5907102d7e9309e32f8708bb1ca2aa5896e3f7595072dca3b71e460e5b534370fd917ddd81b51","ssdeep":"6144:HmQi8czmedwaRr/GiOugkwYQ1lE2NvrTxVelN/S3X:0PRr/GiOutLQ1lE2NvBVeL/4X","tlshash":"017408c8f1c27468a7a7502880af050eb33eb555f54e45a4f1b9f8d4e8ba1ce5123fad","size":366856,"data":"","first_seen":"2026-06-03T13:35:50.726789Z","last_seen":"2026-06-08T13:12:55.963589Z","times_seen":423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~app.0e5f27a8.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28309b30d281b76c8961458a3e3c2e92","sha1":"fcf7dcee5fee0f1b1966e46bbf3d5befdf08f465","sha256":"4fae2046a46d324f35def1f90fa6df3fa75b4a88e69bad71c4eed4784021baeb","sha512":"cb4c5c2f8a2f4ad6ec05a391ae89a913c05af176a5bb725087a8cf54a3768692139e985fda5e41f4bc13ef096f155c60fa296c469b1f2b7391018f9dd6f48f9a","ssdeep":"12288:Po+w3n9KREEpXF1gFy5Kq5RWZbD/mP7qAiuaAaly94PoXDaJ/xthRD3uK5S/i8to:Po+w3n9KREEpXF1gFy5Kq5RWZbD/mP7Q","tlshash":"68b419c5b6e1f5b64b9650e2583b1007f33e4898206d40b4b35cd6dbb8ec58e61b6b3e","size":498001,"data":"","first_seen":"2026-05-21T18:24:25.43567Z","last_seen":"2026-06-15T10:16:39.252547Z","times_seen":2278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~sentry~app.6ffaf6b6.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"043179025e75b3f210655e32ee0f1a9f","sha1":"368ad62b6af595cede271e7ac4140106ef780284","sha256":"9b03ca1d1601cfaad1efabd6cc84f753eed5273a8746779df06f479bc2190075","sha512":"bab8a9ca8bfbd122f5febe5f793238d0ef40ccfdc2f223de2cab77c157421f7ce45f1c682abdca68466a45bea4705d1be8d21be78a64b46b409ce7123265227d","ssdeep":"1536:cAy1BQKh4+lC4el5txG+u0JnbrpxyR7+hlPp:cAy1Jhm1l0Lan5xy0","tlshash":"0d73a2c9b1d2b02053eb19a5903b410ae77a5994300b8490f67cddde7eba15ee273f2d","size":79172,"data":"","first_seen":"2025-12-12T19:24:48.741414Z","last_seen":"2026-06-29T09:32:19.293131Z","times_seen":8806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~app~tooltips.fa67139d.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"feba23d61a53fa483edf6e5d20a11411","sha1":"49bda1a8629a36453300615fde8599bcb476888c","sha256":"39079f42fb1ea0741a4ad3d2375ca9aaabb310b499093077037050e199b0a8c0","sha512":"082b6b1379dcd2256a0d238cd634cdd38104fa551907497de0e657a21a460d44630cc2b305178a7cd02fcff330d725b5c54f4618f6c2415666f738661d3ce7cc","ssdeep":"6144:otTnJmpIyK6+LtqAkOjnJDpJDyK6mWBOzrq1PHdoIKCXGpia6MV1Mr3wwoxzWWeB:89x9nodoIKCXGpia6M11a","tlshash":"e515932495a878ed63cf7186908f986e2d6c00338285ee647dd847e727661b63433f7e","size":900440,"data":"","first_seen":"2026-06-02T15:22:37.600636Z","last_seen":"2026-06-23T16:03:20.268681Z","times_seen":1610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0440c52a21bef6b355b3a6fdc5e8b54","sha1":"7021e7d9b8e791c529d4020cadd72c01d97d3c96","sha256":"8bc1d41fc011c1a03bc11e0c1ef77625a4112f364aa2de854897c40be1a2f383","sha512":"9b12235d40757844edb82c6d16ebd549587d6ca2276abd83619dc9851eb2d748d93c42eaf70b9137ab559bd4f7b37ed8163dc1cf63c95e452077e5afbc2988ca","ssdeep":"","tlshash":"cfc08ca9230b8d7062ab26000b2fa904b0113222a5a02c201a1aa3086720e0397088a4","size":157,"data":"","first_seen":"2026-04-22T21:52:40.016698Z","last_seen":"2026-06-06T03:00:25.633941Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/galabet_pwa.js?time=1780021684393","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a962618364fc8c485d5307ca2d6183ff","sha1":"14669658cc93e511cf5b136f4b438136f544194b","sha256":"f84417f7e0e9a86fd3ffc6d6d920f555001bcd53f2502589d79119c958a3bd92","sha512":"72595e4c499330eed5bdd2e8bdc7226b8ad7a3613510a0f198cb7654f2f16cd4c2db773f84a00653d650ecf11053c5a6fb8266ed45abfccf84f8f731900372f6","ssdeep":"","tlshash":"a82120d8dbac9cbf46e1311a5d1d25cb223e11b29d0069f2ffa82b64218115e46ee4d3","size":1352,"data":"","first_seen":"2026-04-22T21:52:39.716782Z","last_seen":"2026-08-10T03:45:15.954545Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/js/2190.79342b2b.js","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6493696288f809edae30fa433628f299","sha1":"851a078a7aa584cb889f0b1790f3022a239f983e","sha256":"0da3d6cb048dd76708fe2333ee41947f53c3ef218824992164534a2e90f2748e","sha512":"48b378e2edce1091aa0a59e6ebec2a42cdecde611785766f7fab021d4f7312484c698c2f431b0d99ab346e0bdaaaee477e677947c326424abb2e456c2dd021fe","ssdeep":"1536:VqYrYXQAlKa2/cbOp2Birzve4ArWNKS/DsH9L67hgvwEbvxulmJrAZakquvpA6EC:UUcbOp/F/J4AJ","tlshash":"f8b3c725d542e4bdefab8026616e3630e1252fe49411808bfb78cc99b6d1d79232f77c","size":114913,"data":"","first_seen":"2026-06-06T03:00:25.450612Z","last_seen":"2026-06-06T03:00:25.471713Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.9f13b9b9.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ff6ad47a9fceb4a9c91db5961c006d3","sha1":"79fdfb2070b5606d8c6d0bf375dcacd56100677d","sha256":"6aef62768b299726c7ba77fc5c3cbd6a1570fea55f6ba55a6dfcf2cfd709c172","sha512":"9bc88cd9347319e032dfe30aea2049d7adb330c481ce84b3c1cebeb355a743e13e55e5335328086151dabfd145bd847722604dad93a78d086a79e1ce52eeb91a","ssdeep":"12288:P6mGbsmeZP8bdPRdmoKD5oFoySuGarSUl7QHZ+:Gk8tmokRyMbZ+","tlshash":"7545c6ccb2d6f06a43976575812f200bf33e6999b44e8050e629e8d1bcb958d9237f7c","size":1209928,"data":"","first_seen":"2026-06-05T16:52:45.015016Z","last_seen":"2026-06-08T08:04:32.631219Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/app.87c92876.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fc808774fd56cfe03f66abf79b3d845","sha1":"9f2ab1c175c33725870fce121719122f1c95693a","sha256":"8f0debf212ba7b25e30bdf3d7aa1e0ec3097047d58e7a47b9e777c7e7e967fd6","sha512":"99870ef51e11fbc9ad467e17852d0267f35b102a08645937631db5bcae11e36718504ebc53c0b62e7edcf45dd8f87302d5129c11a9b89a419182ac51f97c5759","ssdeep":"12288:Rf02M02g3i6jdoNVKbRs21mPmQ2TMV2FsIDZx6vFuP:RfIUe2F8m","tlshash":"6445e9c8f5d6b024976365b4406f100ef33fb949f54e4054f62ae8d5a8bd1cea223fa9","size":1235633,"data":"","first_seen":"2026-06-05T16:52:45.016944Z","last_seen":"2026-06-08T08:04:32.592555Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/galabetConfig.js?time=1780021684393","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84f7e1647d2dc24b8cf4c4c96e6b247d","sha1":"0b2a4dcca7183066b23b95211a187632ba0b0995","sha256":"16c556f1537d6e9588cd29f553357ffb64a90dd60ffe184c5d82c6ae089239c2","sha512":"dc4abdb9c35fb189a86e619af88f911284c7933c8c76d2476eaf3faa1b61aaecb3531172462e6ecc157257b72307a04ec7f93615b03a3345eb239e3e860d3b18","ssdeep":"","tlshash":"fc5176eac146063c17a402cb24debec67f83d6645cacc8a4e64a5e4cf94b533b097b4c","size":3017,"data":"","first_seen":"2026-05-07T15:36:00.983597Z","last_seen":"2026-06-06T03:00:25.494556Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/js/galabet.15153ee9.js","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48c33b754eb07d71c5925bc48baa8431","sha1":"19c16dd745c5af584c0db54b7b83e7872ee3dc61","sha256":"c4ea1b44c9c49b33638dd102f137557656837b80e7318baa6b8d21b65ddaba10","sha512":"f5ee4fa1bff44e650a13991a2ca96495de7a7008470f6f197dd38e314f1ad60fab33dade5dbb8cf36fcb990faeedc7d04cf95212a63ce62480b8755d60abbbdb","ssdeep":"192:B5vJA/+PT/w9/UZwdop6zgkKZwmZ5KSXbZ35zDb7PjHPb8N0lyatTtQ:B5vJA/+DRwdA6ROwmZ5KSl5DXPjHP4N7","tlshash":"5732eaecf5a2b5b9178300e04cbf500af63a196db4067093d399d8f2397ad9a0753f96","size":11414,"data":"","first_seen":"2026-06-06T03:00:25.135198Z","last_seen":"2026-06-06T03:00:25.443024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/js/chunk-vendors.5e931b38.js","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c3f25fd4a8124cf4527e677e0b2de92","sha1":"4b82e5d45d245e752ebc335706edc6ec6da822e6","sha256":"5b51b4d738f98eabb307f64ceba2ffededd360bfd2373406e0c9bdc310fdb80e","sha512":"ea414225b4a0241a32228f80c3db9f57c5fa8ad4b5358698dbe43f147cdbe636086beb200d804ddbce54aab3198d5536779ba5cfa4469d44972930d064912096","ssdeep":"49152:UzkTMSEXDfCe+SLJJxVThiGgrtp4ExYg9OVyseJwhBSY/ExV/:NzEXDlbLoHJ","tlshash":"9ba51689b292b43507e750a4407f050bf3366958740ac09cb67ce8ea6ebd94e617bf7c","size":2212021,"data":"","first_seen":"2026-04-22T21:52:40.018896Z","last_seen":"2026-08-10T03:45:16.496046Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/lth8spdw","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.80","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0de1bec84eecf92d617ff4ba4da60b64","sha1":"9852d02d0136bb961766879d14ead7c78218216e","sha256":"8d51400ff2f22f5ea3f78422d87d7f2cad2d47f9b6a5dc373a5a8c50466ff9c8","sha512":"ab4c043afda0d320ab218d03804b081548ab5484d9c969c692d0dc071a81f2cb45cb4465a3294cf303f347b064ed96857b57aa34eca13d31bad138c31ea1dcba","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0FfpvVQizfDsJeiMw938I5Zv1JVqUP:v2YVNCH8bMFOxVQiMMiZ935pqUP","tlshash":"47f174feb6c2793806a31576623f770c7e3b654528494490d066c8887a7adcbc12bfad","size":7614,"data":"","first_seen":"2026-06-05T16:52:44.999405Z","last_seen":"2026-06-08T08:04:32.209526Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.8d8332a2.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"20f7d3f7e75f8e795b3e6e1af463ef51","sha1":"09adf58146ee666a9a62b69d73a864f3b1cab201","sha256":"ab648e83d4f9485790c367ebd8520f561fc7a535cfff9b222aeedb0d458b145e","sha512":"0759be7c3b3ca627a2430ce6cd45a6754b80a7820c9b88ac0919f8b65aab1c7a9f4a724f44b2deb138e61d9fc88642cbccbe9981c416ed85c303d62911d6d24a","ssdeep":"6144:88fELOO5nDnqQUsmtaVpqX8mbf0VzraZCuBkqQCTTtWhOxh/DZ:8GELOOD+aVGjU6CuBkqhlT","tlshash":"11b417dd7591f4620bf312f2407f180bb379296a284c4850f664e8dd78f994da23bf6a","size":524899,"data":"","first_seen":"2026-06-03T09:18:24.124944Z","last_seen":"2026-06-16T13:36:30.034478Z","times_seen":2643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-P439F1TYT1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef06e525d635edb7e9c0522b23d80a1c","sha1":"3d0b2975880350dad2318a2cc6c8f3dc11ac188c","sha256":"74014fc4a23e8788cab6b72e49d2eedb4517b60b6562ffe2efd93abce2a6b408","sha512":"f4d63569441ff76b420c68e74f3372725a2006b4b5ed733303e75772f9593ac1187da5e5b7a1c252ba311ee3a918b6053ddc4da2f28bba8b64c99e8c8ba56f69","ssdeep":"6144:8LvL3GsHPLzgbE47c2bXW0w40dicStQoxhDKTl2xGKQ:8bJz47LSoOf","tlshash":"c3a4e8ceb3d674625396f478903f01cba57b28e2b44cc89ab189cce42e7459a4167f7c","size":482380,"data":"","first_seen":"2026-06-06T03:00:25.59003Z","last_seen":"2026-06-06T03:00:25.59003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/js/chunk-common.619df4f3.js","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce3481804d4cb9a17abc104e1e157b3a","sha1":"35ba8d126faadff59eaef5ba4901f794079c043f","sha256":"8afa29dede39cf7c4661ec7e1b314bcebac3ca78a704969f609be7170310964b","sha512":"55fbdcb31ba23ff24630f88f6aba68c72b11bc5e59a5dc310127a1e18c5f0136e0e79cb4382be9b3ffdb4cf839b890be7d0ac4ae94ce3d7e296590415be1e479","ssdeep":"49152:7xODddya9Wn3jjRdiE6sbFFbn2UNY8yAzeB0FcmRkaI:70ya945gEs","tlshash":"72c52a07934ae1baceaa8191a40d2531f1655fd5e121d0c9ff799c99e1c8cb4332ebbc","size":2641759,"data":"","first_seen":"2026-06-06T03:00:25.572529Z","last_seen":"2026-06-06T03:00:25.637152Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fe364450e1391215f596d043488f989f","sha1":"d1848aa7b5cfd853609db178070771ad67d351e9","sha256":"c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e","sha512":"2b11cd287b8fae7a046f160bee092e22c6db19d38b17888aed6f98f5c3e936a46766fb1e947ecc0cc5964548474b7866eb60a71587a04f1af8f816df8afa221e","ssdeep":"","tlshash":"54600088282020000000228008802020000203e02002020020c020202aa02280800200","size":15,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-08-15T02:45:19.372567Z","times_seen":87497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/gif/gif_10.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:22.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/gif/gif_10.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60944\r\naccept-ranges: bytes\r\netag: \"8dca17034d33826c93ea01cd61b676be\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5BYZXA9%2Br4AcH35m7kJdJ8uM%2BBhONmSJShkqKFfMET4H330lpH92N0vrwb9f9a4CT%2B04rD6dx9I0zmQaXImgYLSLDxkcvjMlqBrOrNjAPq6%2Buq1HwS6fwuwroMtgYGqeZvzvHeh4jYg\"}]}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=79025\r\nvary: accept, accept-encoding\r\nage: 4696\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742923aa3456b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60944,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b2b514b53182c00953ee22132ea59af","sha1":"60ec28bcc692706d6d3e320fa1e8f1d4e257fad8","sha256":"083663c0814554efc81c02b265781d34947ad3cbad4467766550d79f9cdb9ee4","sha512":"f379d2d54e39571d0174366b66d909a45dda276e3c5e153b9cd0669b347811ea54cc1468c141b002f09de3e8bfee69000bd4b2c9c478cde2e4aba115a056f7cd","ssdeep":"768:P8K7Nhshaw3vUX7FCdk71Vy0mfkIV1xvRzkMNrbFSQaqZKHNXdXrZdf2FBMbOaXE:0Bal7c0h89Hpb0HNVb2FKbOQqs75Gtl","tlshash":"a85302d82413d632e81be9c93f94d53a96302aff39b5a436bc11bc9d45e24ace990313","first_seen":"2026-06-06T03:00:25.283289Z","last_seen":"2026-06-06T03:00:25.548071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_0.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_0.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=63882\r\ncf-ray: a0742927ec55b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-f98a\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5DEFV0GkBenJXx6DR8Btg0wi1%2B7r1Tk6KhzqqtDydCa6BldOGGOshmFAxAv91GqRguTmygaNwGIYyjItdTTmuvYZh4WiEuw7QvfHSSwN0Ycm%2F1Jroxf753e%2BMZCzP0v7LrPrpnqE1PXFVJY\"}]}\r\ncontent-length: 54932\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54932,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f6f2e04a6092cc17d838a237fc8cc6bb","sha1":"f15304dce8605cf295b5c90211bbd46b37a4e9a9","sha256":"1bb952f30699ed70fb834cdae2620911c9af2f17c7d4f8d82110b4b7bc9dc3a6","sha512":"e77f3339b42b3c156a812af130c171987ac7660bc4363dcb18bb6922a31189e758c0464c20034caa6002b26f78afb75c300058ae2897df806472a313c6957069","ssdeep":"768:sBx9Es6rdAae1jZr5jCkIFgG04fh40XIZhVASPne3oLEJJl8dbWu2qnzIsI/I/fH:sBEsa+jZrEZ0qh40XIvX/LE1QneQbT","tlshash":"cd33f1fad9247ec33fec69f66b3f889a3f1193159b5c066d1d7011b0412e124e6f02a5","first_seen":"2026-06-06T03:00:25.030383Z","last_seen":"2026-06-06T03:00:25.286157Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/gamelist/status","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/gamelist/status HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,content-type,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5870\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-8v4gDtBmJnV1zJ0cXVOCaA' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a7b767130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3xkWA9hXYnRHKzqi2BztLtXJF88tLgeRH2CXhlghB1wy%2FW5Mk%2BSzZbG9SLbNFrxfO%2Fz%2B0LhxZ%2B76nHAP64nmnqv6mBSPZQ0wMx%2FWU4NRWK9BzyRMMCUV2YVlCnpb%2F4nSjdzd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a7b767130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_15.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_15.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=76133\r\ncf-ray: a074292aec73b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12965\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mt%2BIJIQn%2Bwmb5sPX20mWFQRTXgW%2F4OXHEv84yhIB9MtTO2XOPzC0I0SGiVL39EwQDqo3VYmGt4lv9Ken9Z4W2dRKQJ6usNZEcss3CrxRc94wYfXTWuJHBKAVWjHqe67jr70%2FaqYZmQ5283qq\"}]}\r\ncontent-length: 65964\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65964,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a472def57d918ad853d6f513952b44fa","sha1":"d981531b20fb97263aef793b8b90a0d7a0035f66","sha256":"daba629776e203eb4ee8b250193f53bf47b10b2797d44a388406973bcbda6aa0","sha512":"541af3e55ddd6d2d829a3a32a088195d3aa5fec5962a8b67bbb9bc98927796c4fc0efaec76295c5443bff734d2de54d2eb12c4b761325c9abd3459657b4b3536","ssdeep":"1536:msS4XLURPdi5bnT919SRoXihONlu7K6fsANb25ojLCj:mslIdi5jL9pXioNlifsA8mCj","tlshash":"3f5302e661c7ded981e44545a800ef73f0711ca3498f7b0d8a21af6dba0ae8c746c339","first_seen":"2026-06-06T03:00:25.288141Z","last_seen":"2026-06-06T03:00:25.374131Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_21.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_21.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1980\r\ncf-ray: a074292e7cc8b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-7bc\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DjekKIMcXcT3ijkccOuPhsImZIDs7o%2FQ5j1Ohyf2S%2FCoylkpe34LGCnlocjsurNPNKrQnpcgw7MdT65ORV8vIO7c6nGLiPxxVX73aeNZ8nt9ip1CNyVbKlS9%2FZAFJWXfe%2BGNvs8DsQ3ArCbU\"}]}\r\ncontent-length: 1706\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1706,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b375cee193a733ee9beb2133ef0c696f","sha1":"89e0c6572c9dc7305ca7cbab4944eaa95ba054e8","sha256":"8ed4164df8c209eb36d2d5fd930eca5e9ab24f3814e1421c26064eba8aba942a","sha512":"52f1f201808463766563d592646eabfdc55a764d638e3e3a8040ba80214a34eb4a7f729d783a7a0d568c6aba87d33a7cf4da97c9cb44c15bef7c3eb5d7e3d4a9","ssdeep":"","tlshash":"de312bb76aaa82d119299f99019368ed1395b9c656bcffb244d804fc4a847003a438d2","first_seen":"2026-04-22T21:52:39.811397Z","last_seen":"2026-06-06T03:00:25.289629Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_9.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_9.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=66891\r\ncf-ray: a074292f3cdfb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1054b\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IrH%2Bf%2Fa3s%2Fr8JQMBPrEFmpUieO7MLotghOEvlZ7JbxY5%2FuH45lnSpN%2BNuUDYApwmFMFvGqDZyCuT07Y94ox5ZzwJlPTE9RkjxuxZWtoy2BLzv6%2BUN0F2uy%2ByLfnVh1dSp6nYxGk%2F3dJxDAt%2B\"}]}\r\ncontent-length: 58242\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58242,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aedbe2798a001e732418fb59f709b31d","sha1":"cb7efda1a92a95961ed917ec519dfcf8b58f094e","sha256":"6f6347de3779eec8a4b65292ca00298ea4c3e41d8d989f038512cb01b93721d1","sha512":"6eef0418d0584bf8f662edee09dff9e6dc6f04acfb82660cb32d0220e3c8adbd8f9ecbd3f4a1e2f0aa01f267271dadc02278364ada99c6e02209600d24a71cf4","ssdeep":"1536:QTl2Smji75+CMmKZbjHeVYuaQZ9jxee7CfOTVNYfbSksVZYG:oESGiQvmK9TeVYuaijxRiUYjJsVZYG","tlshash":"a043027d6e35e24a8e221d1b48ed02e6a9126ae0df4ee479d3fc639e86517780ce4143","first_seen":"2026-06-06T03:00:25.249615Z","last_seen":"2026-06-06T03:00:25.290558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/gif/gif_14.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/gif/gif_14.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 68306\r\naccept-ranges: bytes\r\netag: \"a8f79bb9ed44a2fe2c83676d970cbae9\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:07 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HEkbh2gtwM5J3SESlCRo0Q4jsyhDy7JeYBf0zMsWaIGMilQfP94IWjO52VoAAK97BU1%2FD4aazbwRanJX3LsoAb9YagESNlofNtfyeS7Zcuo%2Bg0mbI6PuwOgSsuHDA%2FZwJnohC84NyD0Y\"}]}\r\ncf-polished: ok, orig_size=87558\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 3243\r\ncache-control: max-age=14400\r\ncf-ray: a07429244a5d56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68306,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b050236bf32301ccbfead027d1b237f","sha1":"92c1b819e5bfb32c2aaf3a8057a61d8ec76ae1a6","sha256":"aefc2169ee07d7cf4990fbd3a796456a21a2844a6f8927cca0c80e4fdca63387","sha512":"216422281d88e99c7a7e71027df35b0d7fafec8a82b553aef939078b3dfc1b0f65884326de4bbc3210fbaedb4dbf3716a5463f33d99bbe2e472f4d67e3881e2c","ssdeep":"1536:yka4WPf4BWcGAz3Cfh+MenBhARtE/u60SG67bvX0igUL6:z7BWcgponBhAzE/u63F7b8iE","tlshash":"966302de0629c3e560397be924d59b4b626c11292ad221f69334edc37bfb0132d34b15","first_seen":"2026-04-22T21:52:39.789444Z","last_seen":"2026-06-06T03:00:25.291381Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/referral_rewards/withdrawable_bg.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/referral_rewards/withdrawable_bg.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2144\r\naccept-ranges: bytes\r\netag: \"4757b7b5dedeccc1256847279dbce27e\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:36 GMT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=3981\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vL%2FcWjo1auRYKzTfAabOhLWbW9qcFUaxhq%2FJVNwruPPCFlIvGcIxvydxafRw0vtTPWbUt%2BgKo1cl5bagoam8iLRiJnRxbP9PWxoAasUV7sX%2B9C2Pd7H90RgI0Gm9li7cnO7TnVDfzx7t\"}]}\r\nage: 5825\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742927ebb956b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e83d75de330bcf34493fee48fe38fad9","sha1":"c98309982ca340b53569e7271fe2f1c488d9ebc0","sha256":"56b618a11473e719ccd55e5ed072141ca84e79badcc2a6c1c11b32bb89e44d77","sha512":"dc2d76e0f7837f2ab971e84b883521556134e197dd27b11cd7184a5054947ab13a1793f0eb9a7ea28299b1c6a737312c792e9e59d42a59984ffbd55e06c26d29","ssdeep":"","tlshash":"11413c416fec18fefd17c4442231d33f3c14966463dfa57a735e20648d5a6cc19512e2","first_seen":"2026-06-06T03:00:25.292086Z","last_seen":"2026-06-06T03:00:25.359788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_8.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_8.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=81791\r\ncf-ray: a0742927fc5db517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-13f7f\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F53naJWT1oCgMntemXAd2dmD5Vm1ZVh3a42qKNoTQ9QqEAVH0nvkXzfae0IRmMr3ZuwmLv1%2B14u8kTeFvrDuRc90Im7nRcxwI43nL4KWN%2BxgQ5zVb%2FBnVSRbG%2BSrLGr04W7VkrXfw54BDPnD\"}]}\r\ncontent-length: 70984\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70984,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"44ee49c0d82e7394fd2386cdfce8b273","sha1":"9df88fd6a1603ebdde23699a1befe9c8d1ae8264","sha256":"47b5e73b29de257a5b134e8d59ce46bb4ec5b1b7496ad6f23b74b6aa6f9f5980","sha512":"6a952c42d783570d4803e8bfaf17971a0fb98cc9847af2c1efcdb20529b0311854f224ea175de7fc7655393edd205feed7864b78c9a742f6810a766c2ab26462","ssdeep":"1536:+ynIL3KG14QNwauCF7ugQ/W+K+X2F+XmVhr1zPYvjsn:+yn83KmNZPQ/S+GEXmVlFwvjc","tlshash":"2a6302b0c2d878b68fd10d6c9c683e7ab430b85d30d8d926edf1cb0ea51db1a525257c","first_seen":"2026-06-06T03:00:25.116544Z","last_seen":"2026-06-06T03:00:25.29362Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_34.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_34.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=84565\r\ncf-ray: a074292d4ca5b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-14a55\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWMzQgnBobmaQDDvVzA45dYeKVEr3dQ8A8XGT8Ux%2B0I4w3zutB1p52bQ14%2BVU9l9Inzk4hVkE2xtNWOayZWyK4MCsVzTwe%2BARCJUiDbhJ8zmOV8u7xjWqBe0aNg5SQFGQUMumpHXu0Wiqnoo\"}]}\r\ncontent-length: 73822\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73822,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a995eb5339a39386c8f3b8c34c74c2ff","sha1":"7348ed1f895af40dd7f46ee7b22f54be9320b24f","sha256":"5f7b3c55b67e26620603e04282966754c2192b907405d49e086000c3469e1a47","sha512":"aeb2ce1fd2c6749a1886905b9358863a68bd6fcdd1c919e530f9f0a5205c216a17a7c061a1998726f10634e7764cdd0151c6fce1658206cf2b52c941ffd43b18","ssdeep":"1536:tVin2yUEqKBzeI2PMJB70sv8qbUg2JrDgH9zT:to2yrFLtUshbmrE9zT","tlshash":"d173011e177148f88dc9142efe3c50f25d88b8ab3c66a7644d28ddd351bc9427ba4ae3","first_seen":"2026-06-06T03:00:25.295156Z","last_seen":"2026-06-06T03:00:25.362577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_8.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_8.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=8285\r\ncf-ray: a074292fecebb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-205d\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kw1kPaDd0Ri9Vx03jdPAun4ASHV7Ggz51nKr5cDK6hTtRWiPrrmV0LkZnOCSYDqoU9W1%2BMd0%2F8TNwLW%2BzIuoz5WvQncFjwGD5jvYPw2MORsvzGMkiupgmk%2FbiN51yEXMnBMPnfDZInuqS141\"}]}\r\ncontent-length: 6944\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6944,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d2d5306528f2865c3b110395702ef861","sha1":"b2551a7cad2362896f2f0efce52e952f7b4b62e4","sha256":"c186bfdd1678ef8a73d146246a5a0d121864f62d50fe52a478cc2cb935b44523","sha512":"52e53a83ddfd7a5ce8904856881744fe7aad7325b80b3b01c0363f59d6e18f131b0331d8473e27acddca125556e9e93bb14533d2cb46e527ff0f1d57824b0866","ssdeep":"96:Z/TxEktwJHT5JsxFtusliWtYuqBrn6lS6bz9L04b1UCKRq+ObIkJHcIj3g20TZbc:Z/e4zlyu6qFhHX3bHHNj3ib/07","tlshash":"5de1aedc30cbc63af06ee91244bbeda8ee361239c1dc2f97a555b594045f2c1138562f","first_seen":"2026-06-06T03:00:25.296884Z","last_seen":"2026-06-06T03:00:25.437046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_3.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_3.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=70714\r\ncf-ray: a074292ffcefb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1143a\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAx7AQugNyF7J%2FOYXsxPJjt76zFDQexZ7Hb34UpMhfHjGXfnWgj6dRaV%2BbNd%2FrhfiE2Av%2FMbpweNpYopGZNzLbMJ8Hn04HiJgCwKKJfZUgF50Hw7PRABklfWByHISkLURVaPt%2FeRYOrizzO9\"}]}\r\ncontent-length: 61264\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a3b7ad9b7bc1d66b81017537cbb6fbcb","sha1":"64d7b968057ff369b54d554a4ad731acd3abeda0","sha256":"5ac2afa79a4875de256033e077500046fc05298eb45a4310798c347738fcb3c9","sha512":"12c339b55965e740c671ccdf3885e7ce411b5f5a4e1f6027bed0ee5e9cc5488b8b6139d703b4d45d4b771676391cc8e2533055666280dfeb0a9baf7b9a314c1a","ssdeep":"1536:UawhaamA32Ol3UZjUwYGpXdqtNOObQ3FH:Uawhag3UZwwYsXEt9bSFH","tlshash":"d5530270186dc567a0ffb6dfa3b68406ee519523c56810b0eae822df40d6fb247e3c85","first_seen":"2026-06-06T03:00:25.29846Z","last_seen":"2026-06-06T03:00:25.461532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_10.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_10.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=17091\r\ncf-ray: a07429316d1bb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-42c3\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8SQS7uyHlkKh85oLLBaaDW56SjiT%2Fc%2BoWTUVfPlCmY8lEm0aqGXwKfoy%2FiVMEKC50DIUS91Z7wJZ%2BYFnRs4N%2Bi%2BP8iLbrixq7%2BLg82BQdBIrJ7zrUBuuBSDwq0RRCKIP5tNJk2nnRj7g3wF\"}]}\r\ncontent-length: 14398\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14398,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b64b72e9b9177b5bc5d4fcf0c2b72124","sha1":"d338a3a6173888db63d194142dc177fa017f758e","sha256":"c0a71e415cdd31f34c1bad5e2aa533bfd8eb1c41e4854bb8c814f50b07b2707a","sha512":"133e8683e16762217c4736b2f1e54e928019f9ad16d22d15821335952ebc7ef71fca8b80348d10f5b23b79c3050fd2d13afe5a02b9a13226b8b3d3474fe829d3","ssdeep":"384:yLRfjE/jyEQU7DvwfHTxm9+DbL/AJyUQBAE:EQ/mEQQvUA9oLYJyFCE","tlshash":"8f52bfeff1d2e4114c0a5d8b2e2e9994dfacb1044f80227f56a936e901868c934df77b","first_seen":"2026-06-06T03:00:25.300329Z","last_seen":"2026-06-06T03:00:25.343692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"nexus-websocket-a.intercom.io/pubsub/5-eERfoCbqSgurWsgDKYCj7i8csDP3u-Ewo8ANjwe2iAC0beEMMJDZQUWdVYbTRLyEJO6C667csBF4OIDVOtkfvxwPKVPOgd5fEkAe?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.18.8\u0026user_role=visitor","fqdn":"nexus-websocket-a.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"18.97.36.75","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:27.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-websocket-a.intercom.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:20:11:79:9E:6F:58:15:2B:89:DD:5C:DE:80:08:89:D6:0E:18:4D","sha256":"B8:10:76:1A:37:66:06:C7:4D:AE:50:03:73:69:52:0C:37:BD:46:1C:EA:36:07:26:E8:3C:FF:FA:39:BA:CA:81"}}},"request":{"raw":"GET /pubsub/5-eERfoCbqSgurWsgDKYCj7i8csDP3u-Ewo8ANjwe2iAC0beEMMJDZQUWdVYbTRLyEJO6C667csBF4OIDVOtkfvxwPKVPOgd5fEkAe?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.18.8\u0026user_role=visitor HTTP/1.1\r\nHost: nexus-websocket-a.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://casinogalabet.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: lhMgvPfbxYj2iBNql7iLCQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Sat, 06 Jun 2026 02:59:27 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: XrHx7sL0OG8aqSl2r+FVDrhdzkA=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":1,"connect":95,"send":0,"wait":92,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/gif/mini/gif_10.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/gif/mini/gif_10.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9204\r\naccept-ranges: bytes\r\netag: \"b6eb9f8e37b4c35f9fc7eb613498db3a\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VORaWIl9KhdC8ujjHmk7tFXZYu7pM%2F7Iej1p3zS3kcBhRy1jFZ8PeG9ENlEjvpz0zcVUERHZecbV6h8BA8caobeXzyyL1fdJDB7Vs7LMrv87d5sYlPvdx9CRZPw%2BliOhLzN2ArjbecKe\"}]}\r\nserver: cloudflare\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=11861\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 2508\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429262afe56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9204,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14309eae17f815f1a72bcc16e7f5f31f","sha1":"e95c75ad98b8341e107f405382983bec92fa52ae","sha256":"9de5716a8c0c81686fd15cd408e55cc9218f43bc810aec81c7e37a7164e18c7c","sha512":"0eb1610a7ed8734a0ca75ab6c5bd1dbd942ebbe0ee5118331d5ec869166d750fcd49abe386de298bccd7bdae02eb592f172916d700a18f2f2704d39758ecf593","ssdeep":"192:ZF216zskglkwnDIFK1iCU6kIHn2eIIlhDPTcdaTbkkrgkI:ZF21SFK1iLIH2eIShkd2pI","tlshash":"bb12cf94c9c99a3d028a3b7fb36dd27055f60968f973c73a6672911c8d33906a7f4604","first_seen":"2026-06-06T03:00:25.30207Z","last_seen":"2026-06-06T03:00:25.555016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_9.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_9.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=47188\r\ncf-ray: a074292c9c94b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-b854\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ekMwb5kpKRwQSEpSfpAtFgYpYYDOQDYNSLeCgYhQ2gjVwQ06iRAbNegxklkrZaywQwCSnJdaPkQOuFT1VenoFZnLiXQhSynltU9evlEXaK76YGm5PB%2BrFC5UxenPj%2FdFUCEKnf2J4TQoPGq\"}]}\r\ncontent-length: 41458\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41458,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"19d1de017cb64e4bee250e6294f3e11b","sha1":"e160b06931e584b98c9254810da1f2159651912c","sha256":"a49fe2b6ed7fb9b84a79daa9f7d71ab9289993d8de577dac1b3d1f739ee00de3","sha512":"47e7da30392a834699a841db148b142cf06f9bc00630f74bc50258fdbbe3a74031edb961ae876d2920d193477296baeddd1f3766c0ef284985db642dbf04e33a","ssdeep":"768:BEch8RqP7S0rW8E5+zjS83d8dcNg2MUeDv+dceQuUAcan+keqKCPMEg:BEcjzS0IEe8Kdc12+dzJ0keqKCPMl","tlshash":"0813f245e4e38036b13dcbfa70985e9210673c7521dbf009cd991e8d1ea16b644aaff7","first_seen":"2026-06-06T03:00:25.303792Z","last_seen":"2026-06-06T03:00:25.347389Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_8.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_8.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=19273\r\ncf-ray: a07429316d17b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-4b49\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g0adGMuRKYE3xxjQKC%2BdVsvfIAlq41iocnpiTaC3vNOi5yxJOIev5XZo2O4VVJ%2B%2BMFGuBZ41Vt8%2FhN8N%2FMUELmaokg5FeBE9pfSGfTNswPqh4wcc0qUAF4n50WbQCHlVHGUNJtoPDJRabA4H\"}]}\r\ncontent-length: 16584\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16584,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f859de7d53c4f7e4048e16678499eb37","sha1":"a5a798b214e5092a26624782a2948efea606982b","sha256":"dd4c4bc1899664720f2bbc60d230391d67cdce5d08c89b04d93342fcf4ae2fac","sha512":"378ff91b4731e33e4d03e99c9f945d08e41171d2b445ad3138ebaaf3b0c82acb49c31873a856d9a168d1510662cff4cc5b3bf22f4e772e0173c0ebc4240783f4","ssdeep":"384:ZyPVZB2ro17t05EDzH0jdY8BoJyorMsh6H2pL9ZIw5vy/LmC:ZyPViUHDzH0ja8q08MshwQKw5CLmC","tlshash":"6172d041099a08b87ef6f10db35492d432b687a94e1196f337e0f5f8f4b9a9c815c594","first_seen":"2026-06-06T03:00:25.305448Z","last_seen":"2026-06-06T03:00:25.376741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~app~tooltips.fa67139d.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:33.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendors~app~tooltips.fa67139d.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 200900\r\nlast-modified: Thu, 04 Jun 2026 17:45:30 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: mLeRUdYCkPcNhBrVUlExPvchPP.FrKdj\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 01:14:23 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"81b2a0d77cde0a0dafbc10d2aba139fd\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: toSBQEkBg0hBN1X-WXKkKUHmqv1z6cuV8OqLNP5j-ShZMFI98hNCLg==\r\nage: 6311\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":900440,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"data","md5":"7738d794ccf67c98f1ffdcdb63f89fb9","sha1":"dab29f4b0cdb2ef6336b5225e7613f47a97672b5","sha256":"3bf47a8d3073151da45e4233024e325415b36aee829b56a009e7e649fa07037e","sha512":"6655ced8f10481ff7c048414c302f48b8f3789b766f3a8dd512801a1f20da4c7185d1cdb1d2c71ab3ee4135e0613e4dc9f9572a283b110b7afc8a87176e00525","ssdeep":"6144:otTnJmpIyK6+LtqAkOjnJDpJDyK6mWBOzrq1PHdoIKCXGpia6MV1MNjcoEIoLfzU:89x9nodoIKCXGpia6MFd5M","tlshash":"e5157460d4a436fc63cf7087508ead6e296c0133d385de78bd9847d7266a1a52433bbe","first_seen":"2026-06-02T15:22:37.544941Z","last_seen":"2026-06-07T07:37:36.887116Z","times_seen":366,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/gif/mini/gif_14.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/gif/mini/gif_14.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9782\r\naccept-ranges: bytes\r\netag: \"4ee6d19faaee63d22d82824e6b34abd5\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:18 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zE70iMjGDKnPjNqmRH4SplhkO5s1eQLFktggHn9JqQSysANu3v%2FPK8V7yQ1l5wuiYtAlAMFiexIa%2Fg5hGSqZKDzj%2FfBPju6fK3UPvSmVwAmYtAWDWtZ7getGo2y6gbByTdZmESvE4yRk\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=12291\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 882\r\ncache-control: max-age=14400\r\ncf-ray: a07429262b0556b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9782,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6512cfaddbb0b4aa7b252b14e73cea6c","sha1":"03208ab94b48e8e6dce116362be5e9f177852494","sha256":"4b526bb9f489253348a61073a52e9f458c3d94314a72782e28c5408020d9e427","sha512":"242e4032ab35fedb91d455e8d8dc4142fe652f3dcefce2e6dd1a1d2393c4e615c35949f6e389b901cb0a3052c2c11b21258b461c7e2f548927de898f86887ac9","ssdeep":"192:CK4kCsd5McuunvbQBHRscMeDmSSVAcgVyLoToW6AU2zfjO/z2iXdjBqz4LrU:8sHnjQBWMDggWeoW6AURr2iXRBqYrU","tlshash":"5912b04a1683a8a3d96d6d7a3746654723a314cd84998ceb8edf3c68eb01406c19722e","first_seen":"2026-04-22T21:52:39.850398Z","last_seen":"2026-06-06T03:00:25.308178Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/img/title.cf9283e0.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /static/img/title.cf9283e0.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=138525\r\ncf-ray: a07429278c52b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4d-21d1d\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:49 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ne%2BUj4t3OKjqAgDKwaPVJfb41%2BrOzj%2B%2By4qPlWHJIAAj9ELClCzxZBy%2FI8p8TfVAEvnYOuJg1mDL6pfk7gXymp7gKpEeJcpDIeBzlxdUgXWS7pvDuUaRAG6mBfwC2LrzxK99GyjJaVnKrbA6\"}]}\r\ncontent-length: 89068\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89068,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"566599de76bc6c1000d1810fabf1102b","sha1":"a568dc631615a99d55eff284c194c6c16b25a034","sha256":"4e468f461cd1dd6cf9b3f157d764124a752e303c1f4040fb8795f3da92332bf2","sha512":"e090880ad1415515261e493b835024eb24fd5b81535b2515ff5b1b130b9ddecdecb5efafeb0901ab4047edac0eab106a6371ad0f839725fca4f9fc3a4abdfc5f","ssdeep":"1536:mspYtuGfcBSvWDGemQDRBNhX4l2OHBz2LUxBrnPws4Pz/tRlo9z9TqRFF8U:mTYGfcLD35RR40OMLUx9Pws47/t7o9Q/","tlshash":"1f9312907554f7c80511a7d8282dacec17cd3f25bfa2b4e1b3915ad2034d3aaabbcd94","first_seen":"2026-06-06T03:00:25.30882Z","last_seen":"2026-06-06T03:00:25.420892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_6.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_6.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=67707\r\ncf-ray: a074292f3cd7b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1087b\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yqMVLy%2BVlQL7DabM4LZ6RLKd%2Blg5CKab6KnFLCmt2REePOjgpRRXNTDhDImXtnC281M1EMy%2BUw5jATfhTQH8DCtU0O9kmzFgOV%2BVgYdyLFw1h8QMWeu5A3Bu5mdjOQOgDcveQJ2vRAI6xRJx\"}]}\r\ncontent-length: 58736\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58736,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3da99273b62e86023f492a531d15fb42","sha1":"3893d2b3b7f4e6fe79867e5e9a201ab9e0b0b410","sha256":"908bf4a4a1791f9a23db1464fb572d14bf8f36181d47080b506e4cf759564637","sha512":"04c5b7bf3a7f4cdb4fe8f8b604401476d9070bc1cf52c8071772906160d30c142876bff8ae35f122299bba0f2e927f7e16c8bb98bdb06514f3f9d868a9770fda","ssdeep":"1536:iTRRuxXp6PqEEKy5EjegEpajNKNBy6d8rgvdmdGxAALiv1I:eRuxXwC6yajBEpaGByhsdmkiv1I","tlshash":"2f4302c19a613a4d386f0aa76ae274649434bc998ec6c96e90f7f0f152209d1f26c4f6","first_seen":"2026-06-06T03:00:25.10452Z","last_seen":"2026-06-06T03:00:25.310539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/theme/dark/eighteen.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/theme/dark/eighteen.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25404\r\naccept-ranges: bytes\r\netag: \"838624b8c14782837bf2011e6f54f1eb\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:09 GMT\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=47948\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JADpecfsnfulCLsFPVK8bd05nVZezuylmIqmXZ%2FV9ZOUOlcIfmcAWOYmZ6JrabOcdmbyhyLD17wbaXystsLd%2BFXNnNFujhGJGXHKPNWmi3pXxwYwhfvHzhCum6N8zR7WUFNT%2BCe6%2FGF%2F\"}]}\r\nage: 1521\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429264b1c56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25404,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"357159413bba6d5216cabd6878b7a3fd","sha1":"bec455d537c747b9c9d52669ef62fefc6779f5c9","sha256":"2f7216a86a31f35a5a46d146c5060c91bec043e0fe65d22c8987604083f6b69e","sha512":"52f24d934d8be54199c192870e51c02a1978c77211996424557a6a55cadf466d15e16af8caa1ed449a44619af032bbcc9b39d91ffb3e9637e460680797aea674","ssdeep":"384:KNn3EksG0f/YidszgAYHQRdQbexkJUS4M759RhISjp/qaSFvSfl/vhw2:KZ3hsN3YiPAitheEIopyaeSNp3","tlshash":"8eb2e1ba245ebc4136d3b5a5f327861a5be569034ce73a2c93ee3e91c8805534ddc327","first_seen":"2026-06-06T03:00:25.244019Z","last_seen":"2026-08-10T03:45:16.219955Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_33.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_33.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=84177\r\ncf-ray: a074292d4ca4b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-148d1\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kV9g27ZhllymhGxzGJcApqzwmEXGxAsk%2FQLM%2Fui5490YfIgxpF7ceehEU7JBh3sy9yUrM11ZZBc0mxduaY%2Bx9RV5Uf%2F4fy8R9y65R506cfbnobnfMf8BKxLrwVjnWlA9kgSsY0Df%2BG%2Ft%2B2yW\"}]}\r\ncontent-length: 73144\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d451cb69bb18787811993e7ef362c2f8","sha1":"a2bc466a1287e6dbe904b2e6bfd85e2859526f1e","sha256":"491877bc6f5014ecf8ec494fa2ec7124b7408ac59ec9234cbf2d90ef1fb8ef26","sha512":"dcd4e30fb537f77be4cfd252f23050e4907bc4f14cf9de7b88ed9271805d678ea1ee10d120e4e9cca0e5d1bb193eecd225b80777ca69f7f248ead8a10706d291","ssdeep":"1536:EiH005f6Cl58V/Hm1tq1hGmx7NbxI6dG2IC6T1MnIwL5vuH/swtk:/0tCl58V/HItUpI6djIC6T1MnzLVuHfk","tlshash":"6b6301a613733ddd4aa372519a79fe50178f2ce508c6c0b6708a329bc6b503625af377","first_seen":"2026-06-06T03:00:25.312735Z","last_seen":"2026-06-06T03:00:25.455919Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_10.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_10.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2441\r\ncf-ray: a074292d7cb2b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-989\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M09QzVe829f3Qca2nmks34UWLuL5%2FU%2B%2B7rPMHlQAwtlrdsg0vKeKd6NvqpgmeaMOS5HpUsZ%2FmzSXX3DZEnsFpGlQj0UGcw9aFt1zu87tz6cV8odiRK5vsUsQQgK4aD9rSk83CBJwM9bRqd7v\"}]}\r\ncontent-length: 2134\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2134,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c2a82c6f3feeee6f1ecb5ed51435789","sha1":"d0e54a98a2b8bb0c376760a1701f0d43d782b776","sha256":"7f9d64728e4d571dba853849c57dc4719d54b68efe3c0186d96c3ddbb00a2756","sha512":"47420b24f9378bf712e198287b15b32c86f437b22961f821d29eb1dff27dc3df13104c2a8766799cd81f9d2a6006fcf1f13a1fc298acecebe72ae4e9aa855b36","ssdeep":"","tlshash":"e8413c88b8a9634406dbca2e471cfa70731f07b888506657c7cf04e1c41b615c01f877","first_seen":"2026-04-22T21:52:39.744815Z","last_seen":"2026-06-06T03:00:25.314588Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_3.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_3.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5598\r\ncf-ray: a074292f3cddb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 149\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-15de\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZuvQeWygmuPhR3i45V%2Bz9%2BUG9CuD8sQ8y07uz7rjWM0yof3RJ48Y%2FHJK6zYvwWsWUG%2Fr0xEQK59YZLDHNTygUZyBchQjW5HM%2BlQpOVJ6XALpKAzY%2BejtHHIZzD9LYzpM00WSMGZLYArXOkG\"}]}\r\ncontent-length: 4956\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ce19e60274942f386b5b711b3f6fe5c","sha1":"f84d04ad401fbf919fd0b8a8357c9e397357eb9c","sha256":"6fd4be04e4f942ea15dd04016bbcbb5af3ba53bf782e2a8d0b3d7620d9b10f27","sha512":"23e4c69670b02104f16187a502b75a56a8a24f98aed5a7ebe398936f8f72f314174de97f7da19842558f3cb903207192a0cad7d4f33a8aacbc284e745fa53279","ssdeep":"96:svBlghZQtYiOcET8dmiPn5Z+PMKYUhEuDLnFQnVURWNtu:svBldnL7d3bhSTX2Vdu","tlshash":"3da19e83a1697d481ff93bb165112d5b0409d702bba91ff992e7cec51789b5cf1ca300","first_seen":"2026-04-22T21:52:39.976375Z","last_seen":"2026-06-06T03:00:25.403021Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_17.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_17.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2176\r\ncf-ray: a07429301cf9b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-880\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oDGlatLf48OsNn3t9DKyHopGdL1ZPf0HjlGM%2F2q7CqOW2rRO0QRs6ax1c5o70kDkNt58a8biwJYfeA%2FwZv3B9gGoQ7RDFhTVGijjoFjsU4pJQfXaPPYRKULQC0qMPGg4J8sVEiJ7s%2FJfIfm7\"}]}\r\ncontent-length: 1826\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1826,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f1de4c6c74267216c47ac3e22cdcc86","sha1":"282fde103350cbd8d22986a7fbe8f3e1686d9b29","sha256":"ebd33118cd07c33d909f03f24e009b4b1a0e959f9a51f0a48cd8ececd41efe6f","sha512":"de9c0f4868c372b2ce20d6119cfc10591172dab0dc3bfaf5ee388917e399403004b8c7e13fe8f98e040fb4dcef6f3db9a32699b881996d628fe130d3aa019c70","ssdeep":"","tlshash":"af316d085273e7e46f12c0290203f1d2f88674a7b1cdd39818d0a9031770f1679842ff","first_seen":"2026-04-22T21:52:39.487804Z","last_seen":"2026-06-06T03:00:25.528438Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_20.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_20.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=17536\r\ncf-ray: a07429322d2bb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-4480\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtoaqIyNtH84OgRiPFfsvJIxQsKM%2B9HLqljWGBO5IOkdaF59BiE7ZWRnQeMdtgwVPuDWPsWiDF9NSY2Tx856VZD0E3AGCYk1FljJ9zjFDyonr7LoRzrDjnJZsqdjqExFNe5x6GRZl%2BE0GBL%2F\"}]}\r\ncontent-length: 14686\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14686,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a2dc83353c10a51c34aa5f9eafb92871","sha1":"b394b6e167357a6c86d6c7dab151ed7624e8a86c","sha256":"8cd76b3901f7cff9158d053ddaeca60c9736b78f73cd142b4c9560373087d10b","sha512":"b1b2a8d66c0925e310cbebab40b1f8a6268bace57f7c120345d2e487a8d427ad48bd26583dc433954fbaa8a2abd3792d012adb1205d90b832ec6a33e46cb479f","ssdeep":"384:bna84MDLSsSAkQx1Dl5ithlewHg5YP3EtPh3O:TLTDLgeFit85wUh3O","tlshash":"5e62e101366b44b6993a0467ea92ef36f7d6713e24be14425b4c1b6cd4f6e803372c30","first_seen":"2026-06-06T03:00:25.042208Z","last_seen":"2026-06-06T03:00:25.319072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_26.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_26.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=10573\r\ncf-ray: a07429322d32b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-294d\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j9iWDn8uMzaBYlmn8VuPYyIa2Dr9vX2e3XcxffymkdyzeSRPkeqpmngPodl6zIXheuiVkfduhryzZ08vx3GwxKu0a%2FrM2UBV7fonnTCYxpN19Sic56SQd1kpT4Oq61ZX7tRGJEzqJt4p0vmV\"}]}\r\ncontent-length: 8426\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4935a0fd2fc1bdbe7e11128fe00898c4","sha1":"f88709bba7105c26bc0c7effe0ea0d8e86ece12c","sha256":"cea0afb111bfdb938a01878c1ec184c4439ab609acea053dd4ee0ea5efd1856f","sha512":"6e9b205f7f72a341f17dc8c00923e0e0c441578589506146393b63fbbbf0dc86c10ad4921cb574b43724ff4f215ea27234b4c1291e665334d864aee6fa7f7608","ssdeep":"192:giVT4qIwWv/9N1xlJNPRJVm5oNL598/jqbvm/C:gSBWv/9V5PRaoK/jGvma","tlshash":"77028eeff9409049e2af2b312fdae8bf9043dca0747e9529c256bf496144185eca315f","first_seen":"2026-06-06T03:00:25.319998Z","last_seen":"2026-06-06T03:00:25.349873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/signup_register/fast_reg.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/signup_register/fast_reg.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1196\r\netag: \"14a8508a46c2383571ffcc4f6ebdb8ee\"\r\nlast-modified: Wed, 08 Apr 2026 09:08:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=3340\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xEkwssnrT0GgvO9ErBz7OwDPc45nol1rz38meXvHc5gHLLLwpsfS0NyVDM8foxcHPDeR%2Ft7hwbP8%2Bk9RwOdCI7KqR6YbzaH0RNQIMyz3m1uNoFnjkAXn5lxTkgD7kAvtp0ELpnFCiW4w\"}]}\r\nvary: accept, accept-encoding\r\nage: 3798\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429327fcf56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e9be673500198ebb06c8abd4dd1bd737","sha1":"0bf5ca739581ccd0742eb8b55fbf7f6655370651","sha256":"7d83dc59d89313754a237c793316b52246494c91572d57e5127dd21d2f1c9fac","sha512":"49bda49fa736a25148b3427a25b8f9c16929e00e47e73180d1debfd269f65a9e73943ad1b86fa6f3abd371377047bd58915de9e506bd3a150b78999ee00c5575","ssdeep":"","tlshash":"1821b79593d51e47f1b0591e8883c7602f9ca845359fceb21e41031167f0e419e976b5","first_seen":"2026-05-07T15:36:00.796709Z","last_seen":"2026-06-06T03:00:25.321773Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_8.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_8.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5779\r\ncf-ray: a07429280c66b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 154\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1693\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=arPYn9awQ%2BExTJGHHhQz%2FFU3Uce514rlcfWNmntq25opgeoVDKTgNjQX60cmTD%2FW5yvAyzutEG44JZztghmMR20oOyXQ83ycEXpqfK2egbl%2BA4zMd%2BmoFEE3lZgotxKMKju9V8d%2FTTJTwYGa\"}]}\r\ncontent-length: 4934\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"48fa03c7da51e1c727765e58c0c3beba","sha1":"30a0527007acf6701ccd62d98e93af30f49ee62a","sha256":"fd364c8df206f3b60ede799ed1e9f504874321564d1af5dbc31c8e918d6b4fbb","sha512":"5ecea2705bd55b57a5e8b65a3fd129fabe4067ed067986aa81667eb0cb81ab6d2782c2cde7d03f6794ed2c6be759b5dbca9630916c23fe331be6decb9f76de51","ssdeep":"96:QZa4BmUFpdKmiSq8X4Wu8PZ0OJmoCc7bsO0nnJSqx46yyFkD:QqudK3WbLJ1CcUO0nJSqIyyD","tlshash":"b6a16d6111b5868364dfd14f1dff8b58a68496f003193ebfd5a05c528a37b14ddb4a8c","first_seen":"2026-06-06T03:00:25.322701Z","last_seen":"2026-06-06T03:00:25.478339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_18.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_18.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1989\r\ncf-ray: a0742930acffb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-7c5\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qeVYxoqyMdebQPcm0NW2jLfLc9PG37SjHM30iZ%2BFr9Dx83MWYllfwJlNi3vV3vtZW8Gy5CKQAgiMNGS4tE5298EA8lJZJyYBqIqnRlyDEWk8D8aIAq2HGKqGcoRAFhcbSBGNiK4sdLmwWJjV\"}]}\r\ncontent-length: 1648\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86cdde969e2914b929761ebc00fc25d6","sha1":"391ffd14f06902ed02cbb08e8a82d3b619eb0364","sha256":"695801c3b9a69d0d2acbe89d29c72b467190b0ad74a5d3adc5ac51305468e2f5","sha512":"e39e4e70cce4fd6ecf1c639441f23d51498c007d0306ec97cc105fcf95ee99313a36297ddee42670e91dc0f612ce2ed36641522f142d531c4f1d86c527058064","ssdeep":"","tlshash":"36310a05fc7b5365fb802f1a83ab238528da52f03a5fdc3c86b358e0089413291168d9","first_seen":"2026-04-22T21:52:39.782306Z","last_seen":"2026-06-06T03:00:25.324679Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_6.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_6.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=24535\r\ncf-ray: a0742930dd0eb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-5fd7\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHVAmUSJLNJJWqm14MOT2R%2BgBTTyk8rucp%2Bi3Rch9f9dmx2wi5wzZ02%2B5goCRgcNPcJrJ2UXNmZAQknVGJpK4kVD2HO0KbZ7hIX9jw6aQ6rpK0axOESTAaZTftgQhIynzxwsFQJLFyOmXSYY\"}]}\r\ncontent-length: 19892\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6d690ded6d3ef88734f62d94a73099ac","sha1":"787fc58a3dd574d376ee7bd6ff1898c02a031be6","sha256":"11c9ad6fac7483773bb873b53cb19b4660421396157a764ecfc2693cf7d46459","sha512":"137153a7874a1394e28655e75a2ff5512c3c266b17bf0d484242da7da381f572f6c5502b1b9fa4a37ec899e4962e29dbacd666b9f10ff73b068566c4cef304a3","ssdeep":"384:8s7XJ/9v9VhmDuZdi8ajEy67flCRo9NFR/dq4G65Zx7Ohs4yndN+zX8wzIGiii98:8AXtbO+di8aB4NC6DFP+EZxeydqR8GiE","tlshash":"db92d17318a6b3b21b73354e49e2920dba41cee1d94a66a33eca611d1f9d04c1d25be2","first_seen":"2026-06-06T03:00:25.325422Z","last_seen":"2026-06-06T03:00:25.33763Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_19.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_19.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=17497\r\ncf-ray: a07429322d2ab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-4459\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZWzEH7MNUF1qjkMo2%2BEq%2FG6kvJpOq9p0InxgF1VtUYHOXWNzQ834MWv1ikqF4AxN47xDjnn5tAmT1vu2O%2Bw7qb8hKgS6sbztl1twdlxnC7lEQBR5448c64tfX3odX4syzXh1oKbzLbAY4ex\"}]}\r\ncontent-length: 14500\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14500,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"568371ad9f9e5e249dd999a3a9256bdd","sha1":"c174607a508a19d03ca905aced64705e47e45d9a","sha256":"d35b0d4d0102ffb16fe1e417c4cfc6f803784c828a03d7664a0b3b72d48ff7dc","sha512":"456b5aecdc27892f649d416bbe6a61cc2ecbfe4260ef166f7be361461ec71951fad51ad25847790c66bddc73ec7b8c0c406923700cd934fcacd85c849966dbc0","ssdeep":"384:x/rgCSEv21dn6+TkaMsyreqBoI5Uvcy9FXpumZlN:x/uEvwTkaMt5U5FQm/N","tlshash":"e852d01c17ddacac13a136f98976e9d113d6513973482023bc603aecbd497df2c76619","first_seen":"2026-06-06T03:00:25.216173Z","last_seen":"2026-06-06T03:00:25.327433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_2.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_2.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=41021\r\ncf-ray: a0742930cd0bb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-a03d\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=875%2FXHTC5sYmTH6C6tqFgRNBfrTLJIgVa%2BGoi%2F%2FBKHJALjWVMXHHAjs7Ur7Ec7z7fyl6UGjxNx%2FCuaMQYqOfHJeeU6j9tUnL3lGn0zAvf%2BJFw%2FjDCr4E5rKzp7K7EeeCo2njk9Wnf5h8dEV6\"}]}\r\ncontent-length: 30254\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e0694e9222c93884143c1bc52104fe12","sha1":"291c7ce67a19d04118ea45d0dc687a24e6fd058f","sha256":"0cbe932ea76d367078880726e114a1f51f0c4bdfdc541db94c72a92e105471d8","sha512":"a29910df13abf09e1f5a73bb0b1120856cbfc9715ff82fcfc7de20f2397812995e187e6771531e6fe8ce586fb681229baa4097b7cba70c2fe4433f8daf29856b","ssdeep":"768:Dy+Tj2bMAPWkuCRHuoGZKEXqNu1lPtyYxa/K:5TjqDuC9miu1HyYxF","tlshash":"16d2e0b82be80c10507059bbe7bc91f66542dba18671d1fbd39a4bc80f0e05ee72807b","first_seen":"2026-06-06T03:00:25.256903Z","last_seen":"2026-06-06T03:00:25.328991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_9.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_9.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=18160\r\ncf-ray: a07429316d1ab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-46f0\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uu2F7E9fHarJXsswo36VSBLCWpWqWC55MDfrfUxa8ukUQtruZljsyIOuHexIxSiEFEs35OWculx0eOHwRCNrE8F%2Bu9PiIcCkgo8w7klrN0oK3%2BzG2dX%2FJwrfu1Zwk1CuYdv%2FAanZMku6LYzK\"}]}\r\ncontent-length: 15286\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15286,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d536ed4c05c7e4d649e64a2b02bb17c","sha1":"f15ddc35636a5bd87d449f5f333da32dc8519a76","sha256":"65bae1c8929d887dbcef523ad82084441ebc90fc63c76b84566ac1f93c5f5b95","sha512":"444f65017d7f6978ef24cb589569d6b4d2146c5e949cebab8cbed873b8670017b55b1979bf1ec856c951b902ced5c5fdcaa62ba2c64ac8e8267803cb1a5dc3d8","ssdeep":"384:OVZL6S/uyKIgHXzAHNopLOURnFafOLQ4mS9VQWlHH:OVZDurjAHOLrA2cE6Wln","tlshash":"1462bf746f8dd3c0079ae91cc8da4d4debba6db2984533f4b609e34250e93d887f4968","first_seen":"2026-06-06T03:00:25.329916Z","last_seen":"2026-06-06T03:00:25.507432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/gif/mini/gif_12.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/gif/mini/gif_12.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8722\r\naccept-ranges: bytes\r\netag: \"2c70e6e1f42b9d5c69fac02d9d514a5a\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:18 GMT\r\nserver: cloudflare\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=11506\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyACAIjomVBcey9K%2B44Ed2V%2F1%2BaxoftMLgqVnoSdXxFZuKKHNn5HFUULHbB7brFnbcPU0NInBtNeFhUisDQLjLgorMlptmsZ%2Fo55IxGzJtpAXacKPV0HTI04ZvXA0vrcWufFFXKOf5rS\"}]}\r\nage: 2551\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429262b0356b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b00d30a73c181f396b573499ed13379f","sha1":"677dbac6e45d3d7034888d2e28fbe446501ed09d","sha256":"7a835203c6f16095c4931c5a80964145a2cab591e63a4af83ca1359aeb419fbd","sha512":"57017aaed7259ac867cde3d902796b6e7ef7e05a940a6fcf6d38f01217930d48d622e0945d910136f3f59e5f873600280b85e00e8c04ae8672eebc18daf41aa9","ssdeep":"96:Eo5hjAxP35DwGT5C+KrwGbpJF+1KbHMd4oJxX8Qwzxk9ev4VCPfpKqDr6Z2d/txK:zPEl5jT0rQugxX8QwzxyV+fpzFQj8GWI","tlshash":"1102bf0a3fa5f302658cec93a9ff7ae4422a831f63c667c04b62cc19f1e5935515c31a","first_seen":"2026-04-22T21:52:39.980869Z","last_seen":"2026-06-06T03:00:25.405817Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/home/nav_bottom2/4_ac.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/home/nav_bottom2/4_ac.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1216\r\naccept-ranges: bytes\r\netag: \"6861d301be7253cdb6f6033ed6b094b8\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:21 GMT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=3203\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QdcHEXL%2BYL7nVkFO6SsJ8c27mHFpyXsSiFi41CrnFiqtaBQB9z19zHnkgRckiMxOGQ%2BT71ah0JAbSOhTo%2FKOVBURCuQ5fYGKQIMdG%2BJqKraC6qcn5RcgGCYJgTxKkUS1A5aQpPU5%2BbMY\"}]}\r\nage: 5632\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429267b2f56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1216,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"186e4ccbcf12bbb0af9e7cb6ee713dd4","sha1":"3ea10777a885803646a6139e200a873ad1cc50ce","sha256":"8763d8b0f553a179181facdf548a55f86fabe43d8661051e9eeac442e99d5d63","sha512":"f8c9733d2c88454ea0e97f7593cd784df8c62c427c312aaf0f40862baa3914213c38d501f72ce47e35fe7a18135525cfc261c13965a7c3e0566305c3a376ee68","ssdeep":"","tlshash":"3a21ea4d27a97bf495413d6119a21300f1e9a7480208da00aeb6f0545e3709bd2e00f1","first_seen":"2026-04-22T21:52:39.449344Z","last_seen":"2026-06-06T03:00:25.334071Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon_get/3.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon_get/3.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18446\r\naccept-ranges: bytes\r\netag: \"af47c794c6bfa46656d223413b4f11d9\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9c7lazFzWbYuKJJfPxW6%2BAnjXaXrlzok3DAEodpKrNeI%2BQWd1wGx%2BlZEplQ3fdasnA0%2F60NamunrmQEgo%2BSqtfYqTu1lFgXH9Jc0sw2WGgch7%2BHnqyDlmTj4yXhT9ZExFdYgiQ6f4%2F6p\"}]}\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=24286\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 6179\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a074292adcc956b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d068844e1b7d6b17a0b6666ad137883","sha1":"d34a9fc46ca9ac6cccb8f4b038ffe0ae7f8c7bf6","sha256":"417dc1e468c6e244ec2701aa8c9720f8891d13f643fca3abf1ad0906b07699d1","sha512":"f34fff783b6bad12c59dd3359a11de52c8ee7db9d0be7818dbf549634c2943bb54e4c87b4eebd28a5c02cb76b5ee905a199d5e57bfbf03822913c9d76a768ad7","ssdeep":"384:VVcmMVkF3ui0zEiEsTu4uvnLu/M/ZcxnmrjlQJnVd:VVcVFijiEsmSM2nOQxD","tlshash":"0882b06e7b7a4807d6a37fdc8ca965c0804e52866380b914cec93d3f279ba654c422f9","first_seen":"2026-06-06T03:00:25.335521Z","last_seen":"2026-08-10T03:45:15.657004Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_3.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_3.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=50665\r\ncf-ray: a074292b0c80b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-c5e9\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4d0EZYFjnEaSO5UPV2CMmAuVxuRrBh7hKTK4P7Jzw6oDt0vQyAmFZOrI%2FNPC32PQSxhVnTgZZ3WsMOCYtHv4QYMkL1pZJD5YTKbRD5UznpELNMoCwu%2BhIUVds8XmZb7%2BbZCxoUq1Dhowjkpl\"}]}\r\ncontent-length: 41252\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c6ff2d1dfbdb8ec0e6f80c1a372020d","sha1":"d980cf6381b44d1fceb5b796913251bde1d2acd1","sha256":"da11acb572cd0b9e408471d9a6fd84c92a225cc647ed8e7f2acdcc17315d5c4c","sha512":"973a1967d95ac2f6acb9c3c6f6cea4473a0eefcde60f3314651a1f1a7fd70f701ad913b3ddd94b8477f8069c2b9f483ff72c197ca9a563a0ab188e3568bbf0c9","ssdeep":"768:sSmb+/UI2O0hAaNgsjsb1EzD7lc+E7p6C/YU2D2Xnsc9v4dE4F1Qo8N:sSeMUpdhxjCe/72+E7NYUcEnL9gFQF","tlshash":"ce03f07f40e34d4f954ca67132af36f883c14a05ad7c8a2b83e5e595bb842dde04b9b4","first_seen":"2026-06-06T03:00:25.337144Z","last_seen":"2026-06-06T03:00:25.515942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_13.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_13.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=16419\r\ncf-ray: a074292cac97b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-4023\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=68ExFK4Va6Pv9TwxMlgjHDWfA%2FV3E9JHU8XA7BAtOWYMYW2MyVjQgdrI3KEUm1SWQI91sgW%2BjOU9%2Bsh%2FfV6zlBPtkGQRQEbx1uPbdL4FWj7T94MfZc9Dxm8ov6HjpR7OKgoJ0YGS%2BP2Wlngn\"}]}\r\ncontent-length: 13554\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13554,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8fb0701ac440576036ea05fd4ca65e01","sha1":"a539e068930995820cca1bd30e4d2362d40684a2","sha256":"6cc7a394d48581b42e525f0ee85d3aa97f7d3f7ac43296f3c2e0964e32b40b66","sha512":"eb1371fc5adf0c575abf2b9fc3783919375fe520bbfa4a632b0dc2dad1af3be3efb168417b25c5f5048348d1479989acd9775ac595e90efeec27fc6e1fbcdce9","ssdeep":"384:+id92a16IeLR1zf8AtJxObdHDYIWtI/wzoCO48P3YL:+W9u91T8A6HsIWIYoCO48P+","tlshash":"c052c0d58974d9834cfc1f092c14c754a00b144e518476f5a2f6d7a7a38eb52a6fce36","first_seen":"2026-06-06T03:00:25.164018Z","last_seen":"2026-06-06T03:00:25.338871Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_0.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_0.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2022\r\ncf-ray: a074292cac98b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-7e6\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7knXopuQOf%2BNPGJAs1KxdHp%2F5Q6H6lTfijLuO152uHs5BPhEr4hXOaAFpZTztUlnGe3D9Ad65HwFG0Ae0WX8ekGNNikxSFML5OY8e86kZ4zFRlUtxTRlpgvOLsa7Z2p5y8GiHXb9Jq4Jgcbt\"}]}\r\ncontent-length: 1760\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1760,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ae40226c9cf0c08a9af157d037e7a16","sha1":"43b69c5db3102344bdcd13ce151710fc579cdf57","sha256":"34ba65f19c2ae979b8eab654348b832468e5674610985667d13c265a309f0484","sha512":"14812128598ce29f9418f0411e4dd58dee1f8f0025303f67150371268b3136befbb211dd5fece50a76e511f602d85a21356f5b035a215353c8312046d1e81f94","ssdeep":"","tlshash":"7d316a4d0bfbaeb4924af73d9df41c80e3a6328485e05ca54b3b03009180c25a242b98","first_seen":"2026-04-22T21:52:39.830923Z","last_seen":"2026-06-06T03:00:25.339632Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_16.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_16.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2380\r\ncf-ray: a07429301cf8b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-94c\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCwyXsO8Q5lPUSxHjNp09jdICIz8kA%2BC4W%2F5ISErmQFABsdCVsUMPsaUQhffnBoTfK2YVDvGjnePg4uuQsBHuZ2iStzwM2Vm7Ob56iZpuVInmDT4mbYhPgUqSJNzn3A7hmBIfnkzzlyWnFLC\"}]}\r\ncontent-length: 1862\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2013fce96cbc867fcc4220e3e50bafb8","sha1":"1b942067931a56253c765d6d936e15d61d0ebe64","sha256":"61f20b8cd030587bcaa3365ffdf6538943d4cce53971500e3bf0b5bb7aa763aa","sha512":"24c6aae6099182a38dca07c495ba8fbe182b079977134fa52194ec09d281b0482e19a16f2376540944a6bc6ed429196fe802b095b5e778819fd8ff36b1a215ae","ssdeep":"","tlshash":"3f31f9bc99da22213d69f8b84c616a705c2983144f7e2133a0c26d7e9597ec8b57212e","first_seen":"2026-04-22T21:52:39.634904Z","last_seen":"2026-06-06T03:00:25.340399Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Check-in/bg.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Check-in/bg.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 261732\r\netag: \"c7cb223c844c0ecc7fbd7c96b19a3364\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=356925\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AjZQ4rNy57HD0GwWfksyxjPGDGCB4yUH9vF08HoxJ1c1sOGd0kLcKWhErQXIVMeon8wYcAOpVRHVhFZgozod8xenpSvCKIqB9AdyR6o8dTlKNB4uA4oOpZ4Os0sZJEgBfa2ORIAtfEUz\"}]}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i)\r\nvary: accept, accept-encoding\r\nage: 7186\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429280bc556b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261732,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4fcef8e48d93553c4a650266087ccdca","sha1":"0069a62cf32e9bb24df3b1b4a674a187ada7c273","sha256":"2b9ad3c3195906df2939fb92693b1010348231c38981cb58c8afde820d69ccfb","sha512":"9b4a3028a8a6e30bc80b48dae7f54a836eed663992039022925925bdd84bc4bae9bb2eefb49648dc7918ad2895a3e9841fa51677ba761deff53dba43d507d646","ssdeep":"6144:jdi6iqDaWdVjjnF7vceHyMG7BCh3cuZU3JMap8VtpC:Rit6aWPjZvk7BCh3Zq1otpC","tlshash":"c444231cefdf7897d8a57889eef6bb4ce800c6860bda40f477ce848101894429d9e1d7","first_seen":"2026-06-06T03:00:25.341047Z","last_seen":"2026-06-06T03:00:25.400316Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/Gamelist/providers_game_list","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/Gamelist/providers_game_list HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5909\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-vcmWnm4j2SEyJ72G0AHVwd' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292b1bae7130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bRGZUWwlohXNlGo8kZHU64MYLrIFfq9JB7ibVe65J1dVEFCctuS4gwMkrOapP4yfFMCu%2BjmGBlGMMS5PdXNkrxTinXhTFIEQd7NGhjtPMHdUo%2BvtGkRZt98vZ5UULL%2B7wY1L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292b1bae7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_6.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_6.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=3639\r\ncf-ray: a074292f3ce3b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-e37\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Rn3dEcmMZ%2BS2azcXIpuPiXvK49WugW6S6ZaAJtGOnSjPV3ZcaGnRY1jJmtjrsJD%2BOJmPnwGLbDvcjqydUQ3Q9L7BXbMX%2F1YDkifdHFCeV%2FM0EniBZMLh34qGICgSe9mkfJcY%2BXki9XC7tZX\"}]}\r\ncontent-length: 2922\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2edfdf498b022297513a158aae96d1c9","sha1":"a635fed37afb9ede0e8ece1fe2b9225afc265ba9","sha256":"da080279afe0dd780ad17ed9b3f2d020d589323c6ba2557ab4c8bbff462e92fb","sha512":"8d85e322a726e06c2eb0f74f91edb8827ed1852d62c92f1946fab8495c08dfed0e19d6807af978984aa8466546503a99c8ef14b7076e4c8c1c3f4c2c98650549","ssdeep":"","tlshash":"c0516d605caff6510f687f15632b1832e5efe72f4ac3320b92a5652919502329e7b8d8","first_seen":"2026-04-22T21:52:39.964275Z","last_seen":"2026-06-06T03:00:25.344Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/app.87c92876.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:33.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /app.87c92876.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 279749\r\nlast-modified: Fri, 05 Jun 2026 16:42:56 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: PA4EKWXRdMFCKTHmb910c_4xBUUnnsXp\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 02:42:02 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"dfd5878d1cfadc98157f70440c7209cc\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: b5-bR5nu7natXC8MiBFNhK4buM29LcMMF17jj_ASOKA7CJPVmHwfyA==\r\nage: 1052\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1235633,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65462)","md5":"736eea0e2735b123b839e48024cc8d72","sha1":"f465d6a58f8224ef19d0178045e005ac7773f766","sha256":"fc907d1fe290e5afc7bb3b9b0733cb0db3fb3f4c7931456cb3fa360ecb8d8f5c","sha512":"140b4943ecae0b4d79e25fdc5c0a0be0310c213fa9fabace9fcafe44686e51d57412533b7cde5baa0c7f04dab5aa47b55b70fe3d2571d17b35a4cf9799631c38","ssdeep":"12288:Rf02M02g3i6jdoNVKbRs21mPmQ2TMV2FsI2:RfIUe2W","tlshash":"6625e9c8f5d6b064936765b4406f100ef23eb909f54e4054f62aecd1acbd1cea227fa9","first_seen":"2026-06-05T16:52:45.002793Z","last_seen":"2026-06-08T08:04:32.400621Z","times_seen":166,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-06T02:59:20.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:20 GMT\r\ncontent-type: text/html\r\ncf-ray: a0742914dd905a0f-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, private\r\nexpires: Sat, 06 Jun 2026 02:59:19 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnwzoNL0vxm85fFAI7iwiOGB8lWdIdsJChOeD64zxyOJUN4TQr2MY5NzxBy57Mwtiac%2Fv5YXszlGbdpCJ0ssV9m4iZT8Qx5bqn7tvd%2F1MquWGGXxe4evh0XBecIh3xrSQQeXS4uuaxKz6%2BSr\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":6763,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2972)","md5":"4b3bd989abcfd00f2fceba3b0ea3dd25","sha1":"f5dc7b364ecebe0c7f8cd64dc0a492a2cf8556df","sha256":"2b0e93d32b45cbb0772d80a56dcf99af5d3304ac09321754c5759cd6baf3fbac","sha512":"92fdd504e53ce17aece0a93d164861026a621a2d4ed4ba54e36ffb2a0d1c7e7be0ef61044286ddc0d18aa40b352a0b39f1ca336e84b820f50bd73e6a4db8486f","ssdeep":"192:SVLm+oVyUL4AAQ2ENNJttHFS6n3tYpDOZOMBDqB5:SVLm+oVy84AAQ2EXtHFS63tYUZm","tlshash":"0fd1b961e70f80088362dd51388bb69f7d3d01258d758e76edb43a7c4ada6b5436fb20","first_seen":"2026-06-06T03:00:25.346422Z","last_seen":"2026-06-06T03:00:25.346422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":178,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/invitee_reward_popup/reward_bg2.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/invitee_reward_popup/reward_bg2.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3530\r\netag: \"71fd2eb4ddeb1c02f927a8bb91c11437\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=6314\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPuUQC4wUK2UAzGtRzmIxjDlXhSqp%2BCAzOqQ75PYoOw86ORa8o83KGWA5UvKK6ASKzvKUbvMXGrYBvvEzveyI4EGrU8iZo4kbsTP8w9kR7mxNtFSAhov0h1pjCLX%2B9dTZRu79bHcJ5Q4\"}]}\r\nvary: accept, accept-encoding\r\nage: 3441\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429279b8f56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42c55b9aa80f05236cf4a8aba2511034","sha1":"b370a7346865ec3ebb3de73e49d0bd226fa6fb94","sha256":"87ffa6d851bdff3721baac983df03baa5428a7e1cc7b79284eff25c75dae5f44","sha512":"93bcaf74aef14f0a1e6618c94ee5d47036ea9cd7a0c828dd6b1e29a8a43d3b73dafcf71c7c6e712475ef716ac16eccea2160dc83646fea1295f3f72f1cb39b02","ssdeep":"","tlshash":"7a717e3db227914d4c16b1f188ff956b4da19c01c07454f0a3f8cac075411aa36a98ff","first_seen":"2026-06-06T03:00:25.350401Z","last_seen":"2026-08-10T03:45:16.149185Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/ball1.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/ball1.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59634\r\naccept-ranges: bytes\r\netag: \"0b0a95d132b90520789a5ba9e53f1763\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:12 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=89579\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X2trv%2F44UnvCnOYDE7%2F%2F99jgtmTG4DVyrSEz8%2B1f6O7bPAJ99eaKD7SPr%2FUOKZRKtNAKEJ%2FLkYiHmYUVgG4dhqlW8gy684l4YOn8HwnpyHzHDj8J08RmLulZpi1vVSpYtUnYb%2FwFGXrq\"}]}\r\nage: 2645\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742927cbac56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee9cff04d6a9a628dafed49ac55a634d","sha1":"37196d78973ec69c85390aa1d3c812c9f6a60a9f","sha256":"913c8ace65e797e8ceb3d4e1868340a154fa1c18e02b14a42bb3bc6ad82b1407","sha512":"78e289ff13abe3f5bf6cff5f70f6a656403f6f33bd0549c57a7ea3be16107f95168617c7d52483769cae0ff3e297d5f07993ae757e13a6827f0b83d2ef73c65d","ssdeep":"768:GeaxjiG3zpYKtZpACoN1BmYOuGgUN9yj4o1OhK02tiyB9zftVcbvYYVbxGGSwf:Wm25l67EG4lQpLntVcbvZff","tlshash":"4843f21d471a349ef5533b011aa338de66c875c63abc739793b83631a52dc34632269b","first_seen":"2026-06-06T03:00:25.352487Z","last_seen":"2026-08-10T03:45:16.119731Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Check-in/bg_1.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Check-in/bg_1.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19578\r\naccept-ranges: bytes\r\netag: \"39346ff2b0a65da46067268eb3765870\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:20 GMT\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=73889\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNbTDkOUKwmCY1rngel9PfUNzGxyF3KQrHutYg8Y9VP6UCyXDVKOKtkff36K%2FylylB%2FcqwJJwppnbWCFG8wsjfzBvIwl264WyWTuDRqYI%2FmVJSGWCi6gt%2FqjxSqPaq5V26z2WlXcqJN6\"}]}\r\nage: 6781\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429280bc656b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19578,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58ded6b598a5d59265ebd9782975c9c3","sha1":"82b8de744b265111e36b9b2da7a99b55c570c2d9","sha256":"75a793642013565e765bb95ddb2ac69b152e1c5eb121048e9718b1a7cc10f7d2","sha512":"fc051129a280c54f741d63e6a37db311c10d163ddea55048e2211d50a9bfd8ad2b4b21bb002aaff2d8ba1b3c53445bd48a2d588cb652dc676b2fc6a8dbcc43ce","ssdeep":"384:5MPI7BQKXLjkgkTHEr6/+soVN25QTxOsWyv/hk7eQ8+Q21Pi5:5Z1XkDDErEomKAsW2z+Q21Pi5","tlshash":"7992d1a254df6f18d750ceda73dc6b6c00acb34126869e73f49c2f8d046a9cb65a241c","first_seen":"2026-04-22T21:52:39.920434Z","last_seen":"2026-06-06T03:00:25.354443Z","times_seen":6,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/carnival_rankings/getRankRule","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/carnival_rankings/getRankRule HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5934\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-jZnnPhHHv4iW9vFI0cMXb5' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a6b707130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3xQQH9irvcvKx7I9u%2B3HHjIJRdeSw3NDq12EGIY6Xsv4DzqK8GFM58tLHvMDD7lM7K1%2B1%2BAfpevVuQBIFRkEsHjv1e5L9oBaPnJG3h6KoD7Hcj3STJGeAOpnX2Q%2FftmnQLY2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a6b707130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/Reward/ball4_2.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/Reward/ball4_2.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47846\r\naccept-ranges: bytes\r\netag: \"b2acba2fa97ffff37551384c844752f2\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:29 GMT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=84314\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2Fz0xxFUlCJNNn791N4n%2F9QRNqypOsDPirk9FAjA%2Bc8yBfYrzL19JR5%2Fi0b1DIEDFqcuiwCoo4wXJmrop0rP2vRUe0g%2BjIhtySDL0pZMPCiry68I5Upk8WRIX1HaVH4gQ%2Bi5OiCWJ0N2\"}]}\r\nage: 864\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a074292aacb956b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47846,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b286a78444fe719d4292704fd3bf8e4f","sha1":"b4e1ab98aa77f61cc577fcad69662a40ee32915c","sha256":"fc61dbf51333f5083e779b8ec380f249b92132e2164cb9f9d8ca305bc4e97e35","sha512":"8198ffb2edaccce2613c74e05374fd38b5459ce59f8f71776d86b11d4642037855f25ef6bf0aec3da7e5aa4c1f4f1a67564da1ee2f34c507b2bcf6c51046d9e7","ssdeep":"768:8W9W7Ee9r1XzVa8YVSZNF4pebf3JTW0a74Odx/f20RTmPscae0lzSBYg06xHD:F9W7Eq5XzVa8aSPF4pQfRRakOn2pEcaS","tlshash":"972302d77d41368313f66cab1fccc78e0896ca4611cf0152de395a81380afa96d6b46e","first_seen":"2026-06-06T03:00:25.277067Z","last_seen":"2026-08-10T03:45:15.645339Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_10.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_10.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=6176\r\ncf-ray: a074292afc77b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 154\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1820\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KEv6cgtzcce4fo6UnEiStEI0zIioATryyaIiUb2bBczu5W8D1VzBUXDU9qPZ4UJLNY4dYoetkj%2BvqCC7pEE3oqnoyGl2uLE2b4V2CSM6Cul0%2BNzQGArn46ulLJSORZ19ArhMmNCt46LnG3%2F8\"}]}\r\ncontent-length: 5350\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5350,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16325bb101e7d0a94045b9dd56492ea3","sha1":"8ec5476b7f57fcfcc3043f5a4bd3ba817ab1b7f9","sha256":"13acc3e1f0cc2463eb166e07b7af4014bb062e1cdb2b2f0251f72574eb867642","sha512":"147c69e12ceef90304be3006cd34af8c26abc1f3a0081b61e206118a328fae6daf09f204e6399b16f9f9dad0617ca2992ba7049e14a1dfc997eb93ad9f17438b","ssdeep":"96:c6CHCNLEYsmN2J03esHa//xY+PQS4cEz5r6a7z2+voL6mUo0wyyXJQJ:c6CH8gHmN2CHaloS41xdHo/DZ4","tlshash":"aab17d3d83557a60055256b91e6ba07ddaf1c6b6832212841c475b7e91e30368fccc8f","first_seen":"2026-04-22T21:52:39.747217Z","last_seen":"2026-06-06T03:00:25.356744Z","times_seen":6,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_3.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_3.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=71594\r\ncf-ray: a074292f0cd3b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-117aa\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0NN4lYZ7mbjLl0T7uCdc8yiSRVbUkwhhiuVWbhyyLSRvpyEpfZaP0mkhV7Hjrgx46Z0QEBwG7Gou96E5Ohu%2FdQVcx2N3W7pOdrcdHzLES8i%2Fc02%2BBH3LTEiwaV5d66DDVHLon5vJCBv5c5aQ\"}]}\r\ncontent-length: 61916\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd3aedf4e90f05d43450fcb4e442f1ef","sha1":"f14d721b3596db044cc8f4935260d6ad68152678","sha256":"79261bee107f9671cfbdb8cfa959cf7672e245c93e269517d1ec8ab37bfac049","sha512":"769a0fb602b8fe83511894e8cb8e4069bf415e67d157265bdcf8aa5cbb74e69ac77646db5c0995f258064d8c8f91e1442e6532912df3ec0271fba331a992741b","ssdeep":"1536:emmvCjXq9tnhPqkEOscXkJM0s2cQu0taZo7tVO6fgdz:emmw69tnjxJN2dpav/x","tlshash":"fa530261a8511cef89ff568350446255822df26f5ca0cefa83f0b41b716a782511ffaf","first_seen":"2026-06-06T03:00:25.264085Z","last_seen":"2026-06-06T03:00:25.357331Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/js/chunk-common.619df4f3.js","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:20.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /static/js/chunk-common.619df4f3.js HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=34I470iGe2JzvJ8Nn6RoHHunSm7hxcTTs1eQFkUjC3g9CGfcN8A0IYpDZC%2Fohp%2Ftxgn4ElE%2FmgTWwEcWf1djsy3LDptVVYtPdfweyxAN0ORMe4f%2Bt9kA1URTnUbZ4REm1iXq1MrdARclFuGu\"}]}\r\ndate: Sat, 06 Jun 2026 02:59:21 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a07429171bc1b517-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\netag: W/\"6a1d3e4d-284f5f\"\r\nexpires: Sat, 13 Jun 2026 02:59:20 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2641759,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"ce9b1de11f6b29b5fc6bb5f8a5ff0479","sha1":"e734d563ed6a12d80f07b2c49622a85df04b1d46","sha256":"c2cace6f429477aa5b7c0de49252a2242e7e12437860fc0253c6d87f5403ecaa","sha512":"0e4a5c32507fb84a46451396af3cbbdc96231a3867ec123bd5723ec44bfbf19379e21186c4b24e3f28ec57672f71d731432524b556c1c2350243ad776c8101c8","ssdeep":"12288:vdeuk+xODddOvHa9Wn3nA4jRqCRKCUCGCM:7xODddya9Wn3jjRK","tlshash":"3e25b507a147f4bece6a8151651d1630f1652fe4a422d08efb7c9de9a6c0d74232ebbc","first_seen":"2026-06-06T03:00:25.358475Z","last_seen":"2026-06-06T03:00:25.412301Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":982,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Profile/0_0_0_Profile/Function_icon/IOS.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Profile/0_0_0_Profile/Function_icon/IOS.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 358\r\naccept-ranges: bytes\r\netag: \"411ec1a1b007d6987d61101c15dc1cf1\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:56 GMT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=2094\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exTtZ0TDv3%2BLKAa8JlNCdkFlMlvGDVzHu4mqUEbLCHPWE7ulRSr2enJYSFkNDofRjoDWeBAbovFUt7I9YaBaT6ma7ZQb0gj8byxjnqmAQMkvjTkeFi1tLx0oLz7yfPdju%2B9AHtj4LkzT\"}]}\r\nage: 1692\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429264b1856b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4dd773c4be6570afbbf4f90a57d7d531","sha1":"e87061c1ef0acdf9f3bb8a13ec012ab6ac28a438","sha256":"e902e74d133c2d0c266264679cfb755986150cd2689cedfb2dcf26d05490b41d","sha512":"0fe7ce000cce5c8b90042f06181cde3dc724574fd6ad9cf4e55cc70ee3da0b80046e926e966dc8d4ec9b035817b75941b73b38cc9ab38ea037bee6ae72945ad8","ssdeep":"","tlshash":"2fe0c0745e07d00d4354560066cf42310cae958ad21acc22e4e67fa447b99f2b7a98de","first_seen":"2026-04-22T21:52:39.726407Z","last_seen":"2026-08-10T03:45:16.316538Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/home/nav_bottom2/0.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/home/nav_bottom2/0.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 794\r\naccept-ranges: bytes\r\netag: \"139884a5dc719fe5162ade1254e72f96\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:19 GMT\r\nserver: cloudflare\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=1598\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iTOCyfmydpqpE9WoPI4Jh4wEitmknsnT5jkw0ZxBPBbToaH1MXtCFJn58biuH7jgqhPGJ137zW92v6RBxl7g2xDXIC4SSBPj85gdwH6q0fRmjFa0bwErMkk3xaoat5L1zgjDZ5A%2FL1P8\"}]}\r\nage: 5130\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429265b2056b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":794,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e0c8a652d4a0ab0a39f5f1bf03c7934a","sha1":"1e91291050532291d7b7ab2b182d1b887b9a6909","sha256":"6b04ebbb39000a3081f90ca9b14f5fb2c7f7f30130f762dc599fe30e4682f9c9","sha512":"2ea6f649fe8e47383350e7ed3997f6134394ea1e4dccb1d14822560aa521cdc5e674c57c46a22ef5446e6919422bc45318f0271a52edd3f352794775aab6cbc0","ssdeep":"","tlshash":"7b01caa20979de51fdcfd4110d23cad6096ae1bf3275087579825c041f73a38558ccd4","first_seen":"2026-04-22T21:52:39.502488Z","last_seen":"2026-06-06T03:00:25.363283Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/home/nav_bottom/Gachapon.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/home/nav_bottom/Gachapon.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1286\r\naccept-ranges: bytes\r\netag: \"86329b969c3e430d85ebe2e13bbdff19\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:28 GMT\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=3708\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvG0YrKy%2Bx28h71ZuYWGgKsn%2BR%2FkaWVptXP1jTSaQyQ2xphhv5Zh%2BJK47xLGbVnOyDIelDGtsLNBvnEETAMFqO6d8D36wPqrCBqUMhYGLimvYq7VHRqqpHP7KR4eryqqMkChffEzkmzn\"}]}\r\nage: 189\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429265b2756b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1286,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c11ce152a44146fcdedb630c7f24523","sha1":"29cf35d16ebb07cc939f2ca56c31ad618010a355","sha256":"6fc293d0e1734780fa6120e77860561cde8f4c4de17823ecf40bf6480121763e","sha512":"2ada1c6db973eef05356a29ef0939179aa544f187dd5d9af00bf8bc4727a99a5d0ba7896095fef22b005d5b44a9c6dbf0f2b9c1a3000afc7f76bba92faac438c","ssdeep":"","tlshash":"dd21e781d802c138e0a8adfa00cd5699696a2d4d5bb16f9e251f4cc03b4b3432702835","first_seen":"2026-04-22T21:52:39.468441Z","last_seen":"2026-06-06T03:00:25.36412Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/popup/arrow.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/popup/arrow.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 246\r\naccept-ranges: bytes\r\netag: \"c85c07f37824de2bf7b23ce0a3949779\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:30 GMT\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=516\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NSAffNEoelLh31d6WgCrmRF6SJdct7MlBem2o3taBT%2Fu%2FZbU9KID0k9uUm69lvmpyy2n35mqBSDJm8oJSU9jreHEBy6vYdX6a4pyEyfEvzGrICSiCOnEd9HAzm9LDoLCD%2FcH1bxE%2FIYX\"}]}\r\nage: 3796\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429278b8656b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5598b31d85a0b2e8170e5181c79cca2","sha1":"033b596a8f3b41939feb1a746f1062474d6c9ea1","sha256":"eed0efcf3a8468c003d38cd311f370aa223d98f20ee1a993b008c43d22e9250b","sha512":"1526ee7231ac74dfe3924c10115480d854a418e0805516866bcaa805156ac3732a101557dba720c887ae8d404abf438704aa2f3c426a6c4e717c560cf6577f3c","ssdeep":"","tlshash":"77d0a77db96502190c417c3fde152763dc4958805108ebf613a1aae4c5b73c50751b17","first_seen":"2026-04-22T21:52:39.574671Z","last_seen":"2026-08-10T03:45:15.868987Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/Gamelist/game_tags","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/Gamelist/game_tags HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,content-type,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5879\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-Sx4nubotlvyYPos72Lnahu' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292b1baa7130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QBgLE5MOKL6Oj%2BjGhIDeta93uNM5n6iZgioKb9VHUy5dZooQ%2FFx9fXBUPFiRoLDkusfXHTuIiJlEldRBk2xjdvzl6O0isT9%2B0H6gEsVS%2BKvXW4FNcxRYpKOjT40Krqo9PcjS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292b1baa7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_3.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_3.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=46724\r\ncf-ray: a0742930cd0ab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-b684\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=625MsNpRK%2B4ZcPWJBnftZDVrNUk6YxvzzeZJFSfEK8WRtjhM%2BTnQ8rS8uShrz657uhYWaTSnrMpYjK1Ugcfr5MyOCdu%2BeL737j%2BqBRZgCmQYz%2FQT%2Bz6EWM91oBf8CW980w4f8cRpYCEMBvIU\"}]}\r\ncontent-length: 35468\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d18fc176783d01f89e1b9292110cb744","sha1":"1fc4b62c58e0c8978af183d014655926e90310fb","sha256":"d5ed8b480657b3af5548384740872442a67ad2e018944c01fb54b13dd9c15295","sha512":"69610d8eb9194a0c1b4f799c07fe8efd5479c306aa6c36963693a159106fc91dc7980276c77d7ae9ed0cb525d89dff6579c89d9ff6408420864878bc1587e621","ssdeep":"768:C9m84nK5TWT3PT/DOiyPoRj39Xz5KdnapoX2O6IcJl/RIvbaa4pItag3gyw7t+:CAK9STDGPCNDodooX2O6I+4baItB35G+","tlshash":"a5f2f1c57369c23e76605bb082d2395d36aac9b706c341cfc2db96cac1c5e392607a5e","first_seen":"2026-06-06T03:00:25.363662Z","last_seen":"2026-06-06T03:00:25.366829Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/Reward/ball2_2.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/Reward/ball2_2.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51154\r\naccept-ranges: bytes\r\netag: \"f0b57b16f90d555f58eb0c393a798154\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dX6cS3DnyPOpdpcc1VjoMu5%2Bd1WXBzNXLcuZQdLWFla3NELqr%2BApBigqt5gYqz%2FYMINxmtcGl1DUbZH8MWPhbLbd3oySsn0Xz%2BN2jMPUMEpjfBN8V9%2Bx2K8uaX%2F6wTuF6ibrjBQfLrWX\"}]}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=83511\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a074292aacb556b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51154,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82e5a0fcc2b5b02921ad58be10b90b14","sha1":"4caa2733d387033378a7fedf0be8c6dde8fe00ac","sha256":"58668f6bcaa5bddecb0fae233237af9ff785361606b7e5a4798886f481c657c5","sha512":"8b5455fbd0cfa5a7b9615621232ea404dcea6a73171579cb5df43ae717124e5ba0cb7e3961fdf15c94fdb6fe492f1f7e804cd2656eb1baf6efe8d16335c2ca7d","ssdeep":"1536:dipQzbVT9wAjfphLBeS1Nc9s8r2l4GRAz:diAVZw8ftRc9fr2l4GU","tlshash":"4e330270020c27e2ca7be468f6a89233532c975c16c72f6f1bb1c9e3578368345ab5d5","first_seen":"2026-06-06T03:00:25.367809Z","last_seen":"2026-08-10T03:45:16.071599Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_31.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_31.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=76926\r\ncf-ray: a074292d3ca2b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12c7e\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BBfHRu6pP5a%2BL8Nk3cUi9lTgoljGhyzZqIGKkr%2F3vI8wGAOMhcKc0MnoUxJ24%2FBYW%2FerrWalBBp9KDfj6d67P6LtkACeJcNtOI1V1Zw88KZRHzjjjlgcokhbmCVN0ikqBRc2fACLidWZE7b%2B\"}]}\r\ncontent-length: 66452\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66452,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7977818a007077693a00a84126ef5407","sha1":"8646a3a25c59bf000b58c275b303be1edf884af8","sha256":"b290fda95d4c86261f90a7ba1eb8f655e3f4a6465e88ec4d0e7aab0054e106df","sha512":"277ff27ff1548538d943945f0c1574b3784d21d49ec91a3f7a572776947540de7440dce4b923a402b9bbd5ab80640c76003f1c94f7aff32f49b102ac8ca66b82","ssdeep":"1536:NbrpV+fRMyCaniE7P+fxeW/G6KFOtu+4B4QfScLgGc0247+Yau:Ef68iEj+N/GxK4B4QfqGmmau","tlshash":"695302fa2320224d05d9b8c16b76d98dde4f000adb2ae5365d34df0f60e8a7ed67a344","first_seen":"2026-06-06T03:00:25.370026Z","last_seen":"2026-06-06T03:00:25.434893Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_20.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_20.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=183\r\ncf-ray: a0742930bd05b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-b7\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2gyUyOP4fLzLMLoUrGYZU68SQ%2Byt%2FceXiD3oayFOhIBJchgcq%2BtGnMLssDZGxhNbkfG34rP8FYR3OhCY7C8RbT24OlRCxVHg9FToMtk31wLh93OjAlUcuTJlgQCHjnY10MS2BEykI8ZTzumr\"}]}\r\ncontent-length: 42\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c069f1d01e246aa4efe4003ede7d5ba","sha1":"9aaee48762232ed2962af602dcc8c5c593f8d3e5","sha256":"d5e27bfdd05a0b1e91f6363cffc8883efc6d3f703c53faa2363147853cb7ff57","sha512":"db60f92e4d68983ea106d42c43e704824a361834c3419c313dd4b3cd471c893cb6c479b9690558b5c1268c2663473df86091dda58933667996d52cb284a4dbe8","ssdeep":"","tlshash":"39900450d114500414151c4501715dff447744504054f1f3117704744f34c5413577c4","first_seen":"2026-04-22T21:52:39.558796Z","last_seen":"2026-06-06T03:00:25.458046Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/user_behavior/send_click","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/user_behavior/send_click HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,content-type,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5897\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-tz5uzqnHsQeq4ZFcLMd74T' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a0742932ddcb7130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FsggHM5abCZxAPimBZGMu8UGuQOIClfSfK9di0DI7%2B3rOaMAbATX0Q5XNnXvD4t7ol3iTcSo7atLLOixIMdNKqC8Zkenq88gEX48y9pRRTAjxSpMP6pc1W6xuvEDfLhqRZA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0742932ddcb7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-srv.galabet.mx/","fqdn":"websocket-srv.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:22.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: websocket-srv.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://casinogalabet.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: lmXdFdtgx2VgKnnzHhfyYQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 06 Jun 2026 02:59:23 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: uUHnm3NOiggJo3PMrLGx8QHNrzY=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7Ct8ujjhLX5%2BPjZreNUmJZmjT08isc3xrX9Wd%2FGXxs5DcncDJNjO2ZIAd1RNLoZ096%2BOgENpGyYtN5t178Ce2N52vx7w566rsfscRgDt0gC%2FlZJqaaTW9O8gdBgAAqwjFq9lTmkaZuxCMQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nServer: cloudflare\r\nCF-RAY: a07429224b26568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=489\u0026min_rtt=454\u0026rtt_var=152\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3106\u0026recv_bytes=1168\u0026delivery_rate=7425641\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=52cc735dc861aa15\u0026ts=497\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":0,"dns":22,"connect":22,"send":0,"wait":486,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"websocket-srv.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"websocket-srv.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"websocket-srv.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/common/media/telegram.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/common/media/telegram.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3440\r\naccept-ranges: bytes\r\netag: \"52a723ca6b4b50098664bf569e04305e\"\r\nlast-modified: Thu, 13 Nov 2025 04:17:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZPrBdwdX%2FfP%2FSP8uu2YXlL7tE8SMZqbC0%2FL8GcvGv6yZfrlqraueplbHs0ifvRH0FVf8axJnfYXxHAR6CAAjNbS7LN1xUfbT41l5SA6DG25%2BkvGcusfwl%2BvLG9hwtztFT5NPPrx%2BsML\"}]}\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(118;u=5;i=?0)\r\ncf-polished: ok, orig_size=7646\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 6379\r\ncache-control: max-age=14400\r\ncf-ray: a07429264b1d56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3440,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ec541de3367c6377224a0ac9af47560","sha1":"2850c5aebe4f72185a156af21987227650db8feb","sha256":"049811ba8ae98359f2ca7b4c07e4b00a4e5663b10dc78047af464b0c299f3d0b","sha512":"d8351e044c9eb2cfde8ba2cab96bbad5ce6e05656522abfea722c348f6a4df5e66e6b67041c9681d8d9103d98323b861e00d00b987b81e8e632aa956ed96bf4c","ssdeep":"","tlshash":"68615bbebfb0172458f62dd520b491a07d5512bb924690d99b32bb50d5613caf12e032","first_seen":"2026-04-22T21:52:39.924816Z","last_seen":"2026-08-10T03:45:15.703807Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_14.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_14.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=77141\r\ncf-ray: a074292aec72b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12d55\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U55EoqGubOOFEweIi9LVfJ7QQj3jvFyKLOojLTHFdI6bIpA%2FxhdDZaSp5b%2BVYJUmNIW%2FwGOiLWKmJf2Fpq2l%2BDgGpy2DaoGxmrBJPqR9PLfA5oz28T2cirJW3%2BgU3Zna9r68q1%2BZ7jfKFHE1\"}]}\r\ncontent-length: 66916\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"992ac7a46a88b35b4d89ef4f2bcdc252","sha1":"c74441a23dc6997d1c511ba7d20cd2dabe167bac","sha256":"9224741d67ce979e519cea2257ce05a630cc972988b5bd5868b68d1d8d366301","sha512":"9a902145def2780b0f4dd69e8a1485f407c3aa57f36a3802504dd4ae6e564e23d2e3993d9912db5fa87f58af5eccb4b9961bd5a96d4e66e4497fb4c6bd50baa6","ssdeep":"1536:YqnOq/z547WlX5Srbui/gsrvJykx0uPpNBZYn:znOq++crbZ/gOgs0kXO","tlshash":"006302ad53182f9c4d021cfca4ddb623e845fbd7565141e28a871b40b8eeed06f3d296","first_seen":"2026-06-06T03:00:25.033326Z","last_seen":"2026-06-06T03:00:25.376417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_11.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_11.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=66727\r\ncf-ray: a07429316d1db517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 145\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-104a7\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ml1f3pSq1O%2B6eBs5HoItuP%2BeNJniL%2Bd3bL7w%2F7uEbRGJ7FENx2h9zujQ%2FijLwR2Yta5h32yc%2Bg4ena%2FRshA1VNiG1oxa9LgvrS8jhW17fQejbHfkHGiI0746quXTUZe67HZN14Q%2F6CcH6AOU\"}]}\r\ncontent-length: 58126\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58126,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8a01ab390c48a342caa3606af87c1e2","sha1":"68be08e26898c4a41780d19015a4b15f2c89285f","sha256":"a1f9009afd407ff0a41d67832d6ead4e3b327890685134c73e05313915e26b12","sha512":"e344ac1415e142f659019050fc7151741328f99e55bb9dc5e8e4436aedc1291031a14815951f5bfcc28e813c691356d3769f87e667bfa6db1c2e5b7efc5cd486","ssdeep":"768:5VomGLyCfA3NXyvPaQZjtALzY3WYLQWScCHqQpr0J5sEEgjtPCPjRfg:0mXCA3gvyiKzOJS1Hqc4PCPVfg","tlshash":"374312fc5976e37f77471b01e7b9226860120249d9bdcbb67003ac5c6c8e895cc19a37","first_seen":"2026-06-06T03:00:25.377324Z","last_seen":"2026-06-06T03:00:25.536534Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/currency/BONUS.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/currency/BONUS.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13344\r\naccept-ranges: bytes\r\netag: \"b1484c63dda2b734ef6dd9fd4b15b91e\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=teUZAsz01mlGuNlhAEDfnkY1R2i3ksdGBaR9Bwx0lZffnyEpCgxBQEcb9TFTeDjYgtW9ztW37d6iKaEL10DU7UO%2F4z5MBEkLuXM%2FW6IQ%2BCvGp2jGiDikUneaOCxK6QalsJK1kX3BoMrS\"}]}\r\nserver: cloudflare\r\ncf-polished: ok, orig_size=20605\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(74;u=5;i=?0)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 2387\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429277b8456b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13344,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0bf0d435d640073fad96acd714c03d1","sha1":"25b8bc0dcddae3013757d58d33daa3c64fd4bff8","sha256":"59d33b03c7618d14a6f5a496fb99275adaa526d0374dc55ca108decbc2f98aed","sha512":"81f6f82739cc92ca6e8a9016e6a24d5b0e2c087dd1508ff0aa7a510c061096fb391b8e684a09562a288f373070549af650f1db0e471a53c0c7bfe4ecd2ace3b9","ssdeep":"384:NX8o9xTp22oNu+4it0gkrP/nz4N28S+GCi/XbLUZpj:NpxTZoNr4iYrnnkN28S5Ej","tlshash":"6552bf069a3abd3a6a6dd15847699dc2cf89ff54d787d00cecb8aedb04684d2c1cd620","first_seen":"2026-06-06T03:00:25.377712Z","last_seen":"2026-08-10T03:45:16.317817Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_27.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_27.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=78086\r\ncf-ray: a074292c8c8eb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-13106\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MOylgrmh5%2FXHPQZGJpVWz%2ByGtlpTbzXGLos3T1XUIHtMcQyr%2FVPJSRSgwktBAqH5VdcRpatm4CFFd8P261Iz2ujWdexTKpEBCV18KknDjkXIzY1flbEj%2BWO9Jp9Hdq0RBPDZtMpqzpHZmfOa\"}]}\r\ncontent-length: 67672\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67672,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34bca59268b529dac8dd8c94d33d223d","sha1":"bcd6035abf65cd3c9583547750315a95e05f6dda","sha256":"abcc31c4f20ed3ccdfeabe9edb4816c0e784bdf888b67e252b8f331b5722ddbd","sha512":"374fea7c09e7d5a0c517914af841eb8ca2ed81fafaf157f3a769df0ff62bc0d0d205e9c5e9a693dc6076af5546e849ab6a3c161bc8d2fefe47051c4205f066a7","ssdeep":"1536:f/3nnkW10LuF7aGd8H0aGZtX0ll3a3i6lO+wvXhZ10X/seK7PS:ffnkWmL87aGd8H0aGLblO+wvXhZ10X/J","tlshash":"646312fe462375c476b2fdb9a1081b9e1c84ddc2e469ca68b5c1d04e88621dfc1de8f9","first_seen":"2026-06-06T03:00:25.248223Z","last_seen":"2026-06-06T03:00:25.380127Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_1.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_1.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1965\r\ncf-ray: a074292cbc9ab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-7ad\"\r\nexpires: Mon, 06 Jul 2026 02:56:51 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kgXf0ooDrUUy9KGwBK6dPCgJmoe4rVFGn6%2BgyBOn5ujc8%2BYfTD3CGHlOcm9KA8MMu0xkl4rUc0iFAFravJrY7fOB6mck5g2wkBdu%2BVyUhtpHTehtLDHrqZntRnLS%2Frp5sfViXE5qT2C1xME8\"}]}\r\ncontent-length: 1704\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1704,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eeaa25438533b501dee6679b16bdb247","sha1":"cc0d981c0c2f7a371902775e68d4d4988eed9a7c","sha256":"5c52f24f2a14f349fd76fe0275bf7c2648080e06e503fc95063cf6415f46ac1e","sha512":"e2bf3b4d37d085d9f3a7d44b50831f05d7d197fe11c922901b59dcc273a8ad33e1add3bff7e2453bbd72a92165bfc9e0a13469e7e8e822d33a0afc0a41cd7a53","ssdeep":"","tlshash":"3231faf103a312c7da6d22a76427e2108d33f72abd6c4152a741ddcba49034b52ae0e6","first_seen":"2026-04-22T21:52:39.444718Z","last_seen":"2026-06-06T03:00:25.381379Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_21.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_21.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=17424\r\ncf-ray: a07429322d2cb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-4410\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y1LmDZ1EvO091GCxfqE23zPZj8VwW%2Fo5rNbfd7ozHFSKvxLGJRzRYmdbsS3Wi5vAxyA1%2BkYWm84mpY1s9DYFEwd6LJIpLj%2BjWuPWzpPfs%2FslBD6Ee8ld6CtM5m5Pk1otOWP9wwip%2BWLQk0tV\"}]}\r\ncontent-length: 14526\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7faceee0bf31606184e45030a41da48","sha1":"ed2a61dd64b23486aca1bc2432934a6fa294307d","sha256":"9cbf8050d46e5a21e210218deeaea5186a57369cd639ef88c428dcb1bcf9d965","sha512":"f84546e9633faa05609ffa79fb318594caea03c407c87f6a184b7277293436dbe7a93e91f419da2fdb78d1b5d8a4633661b2bc3fef73e087535291fd3aaedb75","ssdeep":"384:EVsldcrSAjgzzRNlVBCLL/cV7m+D4TKovVq4K/iBkNz3Nldgb:LAhuzrpCLLcm+0TKovA4KaBEz3qb","tlshash":"9b62bebe62fa7c083a3770b5a44deeea612d9274bd48c5d65a100cbbc3e65c2460067e","first_seen":"2026-06-06T03:00:25.382059Z","last_seen":"2026-06-06T03:00:25.445696Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/wish_wool/heart.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/wish_wool/heart.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1754\r\netag: \"d0e610edf6144a0c7871a9bbd38326b8\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-polished: ok, orig_size=2433\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mBcUxaQ52jgOn04137oYJhw8rptjvOPhqflw%2B%2FyBo0UdF%2F747QNDCedlwGSWoaqgXMFIVS71btlH2l4CqM2B8qQAFQ6YvsUlWqbrk7ubm5rZI9nS9uWErjY0WgARERDBuQboYKn7kKST\"}]}\r\nvary: accept, accept-encoding\r\nage: 1898\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429278b8856b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"92c72a6b002a77ab89156df6ee0a7555","sha1":"6b10f569c825f5b75d9f7f9738ed469fefeb5b9f","sha256":"cb205a7cb8f8261c5cd1e757d5dd970d35ab928ca0a5776dcb1d5872247fbd95","sha512":"58eb1a7825e55b0a3272866f172ba2f4725f048d8bba2f0a599deb7129931ba34e92fe8179a8911c23e88b0f845e5c8aee7b6cfc889f62d0c0652103fe245dfd","ssdeep":"","tlshash":"0a31e9d29f55a1e768542b8642829d621f60e7d80780ca38d05241d26861a1febb6935","first_seen":"2026-04-22T21:52:39.589489Z","last_seen":"2026-08-10T03:45:16.095871Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_7.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_7.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=68532\r\ncf-ray: a074292f3cd9b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10bb4\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3DecGa7bOmHaayLSGgLw6PrSRsrDkjAvf3ryxabK2VsGPbJJM%2Brihz%2BjrKAyTcm8mXElJHIAYFppgtS65Wu%2Fd1afPWvJOAgSFVksd%2FwZQeoIcTKyo9aqtqyNF9x%2F6mtelHKNnAMTL14lxgx\"}]}\r\ncontent-length: 59726\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a62c0e3dc32b679202c4963deebad32","sha1":"70452a477c45731d90f2cc49d37456be295ddd9d","sha256":"63561f2cb5a85b77aad75b164991da06a24a4613a05596dfe15b522c1b3aecb4","sha512":"93583e19977cae98bec1596d32d373199c51ca3dc4c926ac4c5347ce1146dfe13b8b2217ebe52a7a27b0d3d84e237e1d4ccda02a0d221f85c60f0443dbf43840","ssdeep":"1536:/ywsSSCvgllajP1AiLmCjqNQVDi+ffQ3VmmQUeI1H37+P8KN:/ynSZIXa71AiyXw++ffwsmb1HrIR","tlshash":"00430213be153d5cac3703d555e0bfcb302a6acae6004a1eff4310bd6a4aee651165ad","first_seen":"2026-06-06T03:00:25.014831Z","last_seen":"2026-06-06T03:00:25.384467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_2.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_2.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5963\r\ncf-ray: a074292f3cdeb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 149\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-174b\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VxN59nUuCExoqKAPHjUQVJCdP%2BMTitCJcyIi1LaKAP6mYiexcZcIvxRv2dSz%2FgH9sSWIHpLvRbIQnk%2BoUQPlaUBAsLb%2BHqyrrVM25UlC3Av5%2FC2U3kjg2w%2B%2BZO0%2B%2BZXVM7lbL3g4j%2F4r7fTI\"}]}\r\ncontent-length: 5264\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"575332fb9334139637e903fb5330bb1f","sha1":"d61682f2d287bc45b4df29f1f4e06387eaf0fc3b","sha256":"fbe7916536cc14a98a59d3f72e13b5fdd240b55a121052cae62a1e2b3d68d32e","sha512":"75525b19d5b8ee3107fa41d3c863f1d06668212868525a52294f6255d6cb532eac96799d5c73b71f1cc02e17ce28e12a483763e8dbf89f42a93963b4cb7ef046","ssdeep":"96:mkIZZGubdyEvbkDo+Ubl9p2fLtbGCNqHyQ5jEVyyzAQ+VdnbvjDC1oRBzjKiekwc:cZxdR4oRb92fLRGCYSQ5gHTat+RiekNN","tlshash":"29b19f6eaecc22ed50e74ae59af7481d40ab3b707007f24992d93e6dd5094f19e33848","first_seen":"2026-04-22T21:52:39.524885Z","last_seen":"2026-06-06T03:00:25.385245Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_13.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_13.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=66317\r\ncf-ray: a0742930bd04b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1030d\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4P6HWMRgV97Aih6adSVjuz1L4%2Fm4P4%2B%2BngGvKPahLCuyZhnvFGbuQJkybOasyMxVq0Joj4IDESvu1%2Fs7exOLXe9oJil%2Fy6StfbUe5JCSmg7AZDXVunr1c9Qbyf8yG5fOGlVelwddXDGkSlfY\"}]}\r\ncontent-length: 57336\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57336,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bcf6cac094c528b557dabea408952055","sha1":"b5563ab6606bd0a9b59a0790bed90842735ef7fe","sha256":"d90dc138a64681d56c0cde3cc71ca28641892a3c94b1b08b3d21014f3279a7fe","sha512":"f1b6a9c1cdbef3f4ea3d660622015eb231ea6b52e4e82a015abc0dc3c8303daffe77aea8b4e66e9c37738ae1af9559efad2d57d4bcd4b23679230d7b18792eda","ssdeep":"768:ZJFFbn2+9k0TbSQ65WtYG9SqarJOsh92XHxidFbprmXW9XR1/RCu9OTnwLgTo2H:vFh2QCGtYLqaH6RcFbpryW9hP9GlH","tlshash":"da43128f2000ca69c2e11db9acd94128a0d97f1679146d397afafccf27a848527ce487","first_seen":"2026-06-06T03:00:25.169679Z","last_seen":"2026-06-06T03:00:25.385945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/js/chunk-vendors.5e931b38.js","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:20.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /static/js/chunk-vendors.5e931b38.js HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eudXoW2XqfHbVT4JMbYihuXxXqWF3CEUdMk7bS0Ss%2BoWAcySTnkFrWBEnNxk%2FQE5F4jhPNBHsagvAkOoZFC9yrHSFqO4uZoHYO4SyN62OgcFDuP4gbTDrFRm6f4FdtDttJvEN4%2BApTGLix6a\"}]}\r\ndate: Sat, 06 Jun 2026 02:59:21 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a07429171bc0b517-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\netag: W/\"6a1d3e4d-21c0b5\"\r\nexpires: Sat, 13 Jun 2026 02:59:20 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2212021,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"7cf74c3f9cf16f5c46bc899dd7666613","sha1":"6dbff7f70c3df60816774cedaf7aad7c02b97e99","sha256":"c38256baa1aade7ce092202ca5349af8402d0483023099cb041a9aacf13986ea","sha512":"13fc029bd96f21e4d29d0a78c2ef7b783a8d516f60b7a8f8b3ee09ba593ad03b45cc5419297f43e37ae72a71cbb8c88e7e99ad5e6c04caa077bc4937f8ddf40e","ssdeep":"12288:8W4JzkVhbkHsH5L06YC9qfg2XS7VWVXdtfCSlZ+SfDAg+Mxsr:Uzk0HsH7oSEXDfCe+SLJJxW","tlshash":"f225d789b2c2b47547a760b4402f110bf33b6958640ac0dcf6b9e8e96d7890da17bf7d","first_seen":"2026-04-22T21:52:39.636993Z","last_seen":"2026-08-10T03:45:16.244427Z","times_seen":7,"resource_available":false,"data":null}},"time_used":991,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":651,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/button_1.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/button_1.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11776\r\naccept-ranges: bytes\r\netag: \"30cb2724f0a753b7ce4aefc8d1f33deb\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:12 GMT\r\nserver: cloudflare\r\ncf-polished: ok, orig_size=17815\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oyx%2FFJIIsmzaWl1QE1kPevQ%2BQPtpU0PUMP5CSq9NKodaE5i6%2F2l73BdxjdasIA8RR%2F0hRDPcf2DmebIAFA5B5UoT8YgM16WsG4XwNDfPT0TC51bY7J6Gyjb9%2BXupjaXdV%2Bsu66pv%2FwUM\"}]}\r\nage: 4429\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742927cbaa56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11776,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"078e7e82d670bcb2754625f8e9d59dca","sha1":"80b58be54ca01fa70ff7094168ebba5f4e98a7c5","sha256":"e4f6a6d5fc69a3977d9f7e771c2f3ce2fdedb52fa36b35982b6e788589b0ffe1","sha512":"90e2403e0345a0c1249b699050ba82f67035b75e1d61844521b8f9f29057f052db26349441f0b5822ef7695e818d25b580d15d88e0cfa46a2778e44a37b6b451","ssdeep":"192:cMAOpnlSRxU7T/a/ipyFL/az07hHu2JNUTlxELmFLat7IqnGSGOrsNhxR471LJ0D:cnxU77aGEw09H9U5M6E7GYwNaJL2RfH","tlshash":"ee32bfabc554b7b84398dbdbb26dcf5253b373c336af5a845d5471e78068818055c02e","first_seen":"2026-06-06T03:00:25.388988Z","last_seen":"2026-06-06T03:00:25.415146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/jackpot/bg_2.jpg?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/jackpot/bg_2.jpg?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=feew5jb27SUlfs4JwIFfLe6UuPOzQyzaGGU%2FcC900SRgyszS3xjCUS9Bulv6jmsEK2eIlYVZFHxvBs1L0KcwrZjrR1%2BKi2YiMYXfsMH4ghyTvr20pQWfE%2BNPhDWNxYawDssFGSuz5VEQ\"}]}\r\ncontent-encoding: br\r\ncf-ray: a07429282bd956b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/popup/getCommonBubble","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/popup/getCommonBubble HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5866\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-dfHKaYOupoC5QUtBjTwHTT' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a7b777130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ekFHsAVqmdYUdN8yN4QhxHDVx3zQJphx23B3amOw4OZsctefhyqaE7a2T%2FWR32mgUU5kzeLs%2FuD6iNY%2Bm8TwBkLW8APRlOFbgT4t2CEOR5jV%2FGg7%2BFHwCcJ2lDoONXVckG0%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a7b777130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_8.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_8.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=44802\r\ncf-ray: a074292c9c91b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-af02\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKAG0YhmYdMCZbFZWpeQ3H1swaw%2FwH3xjjwapDfoOep9bchoTFmYqPlkXts2zBM0xJy4vDo9LRNwj2iyFmuQjd719bR4SbHhmxwxzUHbnOSaD4smzk9mTIGf5g1gHlYT2t8brjMdx1Pn60If\"}]}\r\ncontent-length: 39118\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39118,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d647c29dbb60952626832c0457776bf","sha1":"3a09b330a1f0640b31761edcdabd57e16ab6fddd","sha256":"122484ecda33a693a21939444dc2e03b3fe28baddd4da99465931293bd9eff2f","sha512":"5e7db66943bbbbd7c4f1d61ddb03779c38408b6bde71d24a1935459d6b2ef476d552fb4424b13e0528677c1f433fa252b4576e6b7e3dd2dac2108cecd8f84ade","ssdeep":"768:CcBr8jV2OwKte5vS09lzIa6gR7IuKhGGUPh7AEb8Ggul9UcIKM+0ckEppQXDpR/B:R8ReKtAZR7wvg8GgmU9+T+pR5","tlshash":"e703e2fa255bab1952b3662a07004eb63096b4107d9ff53705346ad30b28be4fd8d4ad","first_seen":"2026-06-06T03:00:25.187775Z","last_seen":"2026-06-06T03:00:25.391058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?v=3\u0026t=l\u0026pid=1566619288\u0026rv=6631\u0026tag_exp=0~115938466~115938469~118228214~119027224\u0026u=AAAAAAAAAAAAAIA\u0026h=Ag\u0026gtm=45je6631h1v9228214785za200zd9228214785\u0026cl=3.10.1\u0026ccid=228214785\u0026cid=G-P439F1TYT1\u0026l=L381.S22.Y10.B63.E4303.I1693.TC22.HTC0.F3080.C2~gtm.init_consent.S3.V1.E68~gtm.init.S1.V1.E100.TS5ogt1pdatav2.TI4.TE3.TS5ccdgaregscope.TI23.TE3.TS5ccdemdownload.TI22.TE2.TS5ccdemform.TI21.TE3.TS5ccdemoutboundclick.TI20.TE2.TS5ccdempageview.TI19.TE3.TS5ccdemscroll.TI18.TE1.TS5ccdemsitesearch.TI17.TE1.TS5ogteventcreate.TI15.TE1.TS5ogteventcreate.TI14.TE1.TS5ogteventcreate.TI13.TE1.TS5ogteventcreate.TI11.TE1.TS5ogteventcreate.TI9.TE1.TS5ccdautoredact.TI7.TE1.TS5ccdgafirst.TI25.TE59.TS5setproductsettings.TI24.TE58.TS5ccdconversionmarking.TI16.TE76.TS5ogteventcreate.TI12.TE73.TS5ogteventcreate.TI10.TE73.TS5ogteventcreate.TI8.TE71.TS5ccdgalast.TI6.TE70~gtm.js.S1.E71.TS5gct.TI1.TE2~*.S1.E29~gtm.dom.S1.V1.E51~*.S2.V2.E376~gtm.load.S2.V1.E3~GA507.541.4368","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:27 GMT","end":"Mon, 10 Aug 2026 18:35:26 GMT"},"fingerprint":{"sha1":"81:79:25:0A:2E:C8:CA:DA:16:EF:B8:34:B7:38:E6:48:7B:5B:4C:6D","sha256":"7B:74:72:15:7A:A8:4B:D0:1D:D6:11:DE:7C:D9:15:EE:E9:22:FF:E8:56:41:9E:88:6C:4A:F9:9F:AB:B3:6E:2C"}}},"request":{"raw":"GET /a?v=3\u0026t=l\u0026pid=1566619288\u0026rv=6631\u0026tag_exp=0~115938466~115938469~118228214~119027224\u0026u=AAAAAAAAAAAAAIA\u0026h=Ag\u0026gtm=45je6631h1v9228214785za200zd9228214785\u0026cl=3.10.1\u0026ccid=228214785\u0026cid=G-P439F1TYT1\u0026l=L381.S22.Y10.B63.E4303.I1693.TC22.HTC0.F3080.C2~gtm.init_consent.S3.V1.E68~gtm.init.S1.V1.E100.TS5ogt1pdatav2.TI4.TE3.TS5ccdgaregscope.TI23.TE3.TS5ccdemdownload.TI22.TE2.TS5ccdemform.TI21.TE3.TS5ccdemoutboundclick.TI20.TE2.TS5ccdempageview.TI19.TE3.TS5ccdemscroll.TI18.TE1.TS5ccdemsitesearch.TI17.TE1.TS5ogteventcreate.TI15.TE1.TS5ogteventcreate.TI14.TE1.TS5ogteventcreate.TI13.TE1.TS5ogteventcreate.TI11.TE1.TS5ogteventcreate.TI9.TE1.TS5ccdautoredact.TI7.TE1.TS5ccdgafirst.TI25.TE59.TS5setproductsettings.TI24.TE58.TS5ccdconversionmarking.TI16.TE76.TS5ogteventcreate.TI12.TE73.TS5ogteventcreate.TI10.TE73.TS5ogteventcreate.TI8.TE71.TS5ccdgalast.TI6.TE70~gtm.js.S1.E71.TS5gct.TI1.TE2~*.S1.E29~gtm.dom.S1.V1.E51~*.S2.V2.E376~gtm.load.S2.V1.E3~GA507.541.4368 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/cf-fonts/v/inter/5.2.8/latin/wght/normal.woff2","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:22.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /cf-fonts/v/inter/5.2.8/latin/wght/normal.woff2 HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0fAU3v%2BXZHB1aMdlRPivZB82%2BZaHA0nt7qiaQPH3el2KmaBbmW4cKLOLiCf8d2r5A83CttLqzRiYORjXN2qFsR3jkosYRjjZPcHd6qb1tF%2BoMnZ2r5IQ8cBVpUL1Xwpn%2FNixw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-ray: a0742921fc1eb517-OSL\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-length: 48256\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-15T02:37:12.967646Z","times_seen":26730,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/home/nav_bottom2/0_ac.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/home/nav_bottom2/0_ac.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1176\r\naccept-ranges: bytes\r\netag: \"4aab1da0bd03bc5dd22302a4fe0d0374\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:20 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hGIg4UVKRBbKwtvMzudPL3mFmGIOKu%2Fw6jSEeuLg13BPYmY2okJTcn%2BNf94M3IDB6HrU0Fa0aU4eyD9V%2BdEqryvz5XbUZGWchqRLVbMsweS4cJ2dIUnwBAp7cQGlLesjx1qWbq9ASMqV\"}]}\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=3008\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 6915\r\ncache-control: max-age=14400\r\ncf-ray: a07429265b2156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a4689d97cc8fbf2c918697b9b3f37f2","sha1":"1c125f4333a71662c34f70fcc034b34bc8fd53ed","sha256":"306073486e0133f727a2bf8e47ab57ad3c44489fb8bdba38da39604b1436dfe9","sha512":"19e1968d789abd04062d93f70e73dc20dcb8e84bd1d227341bba3c8466c894920a67da5687ea4821c8db6a9b14a0985552f44725a22127f93a5d70ac75f6d974","ssdeep":"","tlshash":"f421e763c433897b062af23619889914b08c01a1b756686eb569e3892b628f62215d91","first_seen":"2026-04-22T21:52:39.93001Z","last_seen":"2026-06-06T03:00:25.420159Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/invitee_reward_popup/title_undefined.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/invitee_reward_popup/title_undefined.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 98\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGhyl%2F5JZdoFWE1zZ4R53xDYHSQA9t4XIr42KBI69ZkIsx4c3NR44fIsFZwqADopmBqsaaPYO4PEU%2B1w3Fq9yrKd0TPOpkT%2B2UJvFjmE77IAttIn8ONCy3Q%2BoGbEQ%2Bo7uouJqn5aSkfA\"}]}\r\ncontent-encoding: br\r\ncf-ray: a07429279b9156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/button.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/button.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10772\r\naccept-ranges: bytes\r\netag: \"23574815e1c6ebf995ae69399503c530\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxcVtNYTQUKGhHek%2FU00MP%2BYzCP%2FILD714rqDfi0K%2FqcgL86eO0aDhfQDUCDIVJm%2Bu6ES1w8oDVV4gnAUxa06pxsVsTiHPLx11Zpm5JT63ql%2Bzi18otFdgQ%2FlVF7ablSwk%2FX2TrWwW43\"}]}\r\nserver: cloudflare\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=16176\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 5567\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742927bba756b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10772,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4420377d5dbe10a5b8813a8c64539b06","sha1":"ad1f27c2649b045bd39a6be9736917e94d6ed97c","sha256":"0a51645257d77c6fdc21d86abef1e45e038a49c1944316db63babfb1be8df201","sha512":"0366d4ca0bb2cb2276f1c44f7ca6357c389e1f90b72333656ed4af303e1aa3c39129f49cbfa40653f98ee457a89d6ad745a35a0696d96c4d14f7106165b24d55","ssdeep":"192:sBgmbXCDAuTd6vci6LVN1M8q/AjMsX3PFoLCP5GfFdJP22QtLASgGys1c:EgyuT6ci6LVe/ABXfECxGtn5jGyJ","tlshash":"0a22bfdd26dec9d0c094387c44bb9696a64f21aaea80c35938fe9549567f700422d30f","first_seen":"2026-06-06T03:00:25.394101Z","last_seen":"2026-06-06T03:00:25.510215Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/Reward/ball1_2.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/Reward/ball1_2.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51286\r\naccept-ranges: bytes\r\netag: \"f0b57b16f90d555f58eb0c393a798154\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:29 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDujn%2Br9APKp0aWIgKf6iEqkCadtTut1GyWpkjHo8LlxOl1v7kZvBQeR8Rn5rqFITRA2VMiZ%2FjafVLJ%2BvU54tBd6w%2FcNKABdIYn4MiXoZchjs3eQJAgRrtCT4IInplX9DRbcPn2Wc4cK\"}]}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=83511\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 6074\r\ncache-control: max-age=14400\r\ncf-ray: a0742927dbb356b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51286,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07e9f006fea8e4e42c3ab061d748bda6","sha1":"325ab4dc7ff4045112c58ac0a76c9b2c26615bd8","sha256":"7eb6d0056a354026444eb4e191a844fce1b2f55a437c777e67ccc11caa69fa42","sha512":"8ebb95a433a5cea8f2bc9686023621baf391eacb233276c73f4f58c8d3b5dcaf83603f016e8521cb44f2248312a5b274c50ddb3e75559cfed18fd0ffbd8690e4","ssdeep":"1536:9ipP9+gf7nKRK1gWx4BL9TxUVjJd1SgcDZlaHGHg+zt:9il9D7KypItaVX1ShDZlamAi","tlshash":"1333f2d2c92ef66090856074305fa9ebaec8d84c741f494a7a5c6b098d68d4e6b3a3c3","first_seen":"2026-04-22T21:52:39.609531Z","last_seen":"2026-06-06T03:00:25.396485Z","times_seen":6,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_7.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_7.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=77627\r\ncf-ray: a0742927fc5cb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12f3b\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FoOq26InkRCfidhXuBmT8aoz2YiW3gQ9zNUw7mwTlL%2BNPHbXLRtFiIPz8ep449JDp437fqCnPuQ6GYvC0qQluiNM0dUyAEZk8X2DNMV1P8oYC1SIDiVuW4PLteoBdD5gYodaMrzxuW9Var9o\"}]}\r\ncontent-length: 67332\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67332,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5777c7f91e10a0c03a6b8b3d2b1856e2","sha1":"8e8d7941abe07c8587db3b7be6e3f79ee56f0463","sha256":"b3ee4967817f7cb5f1ee1b1e600b2eeeeba013c6cb69ce48d2c1cee49614980e","sha512":"fa992d883213815dac79d0f3fa88879beb567aa2b7004981c03d5b00926b5aeafee685b11b8574314f37e16268b81e65809cf08e833c38ceeccd66d1a9954dc0","ssdeep":"1536:DUE30VUxWdp+vNMWj+mF9fiqCM2bbZ4Wo:DQaWdpK5vpFqh4Wo","tlshash":"036302af884118746118c58cf63c2a7869fc67b5393ae7294a4fbfb7405d8729c30ee5","first_seen":"2026-06-06T03:00:25.007689Z","last_seen":"2026-06-06T03:00:25.39733Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_6.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_6.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=47166\r\ncf-ray: a074292b0c82b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-b83e\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hHKbJKiAWzTC42mm72TVwxGeFfGJiUCxME8bF%2FvVBtCuW27eAyXf2FHMV9nhL1j%2FJ%2FelENGzbqGgPQc2aWzBFb%2BoZNoC7R6cEh1%2BSWZkiT11D5aekoyx39HT4uRNxGiHtRAqg3fstotzvhL\"}]}\r\ncontent-length: 40234\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40234,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1d1f89f93bbfdadd4559c6c1a3155374","sha1":"70bd67aded07bec1565a41d2131909e6ee6475a8","sha256":"6400282b6394ef840ecaf770bf189d894e2f9104203d9e8a33afc41d361f4651","sha512":"6f316dd867c5e43c6eb8fbd2472a367c6d739bfb46f731e7e25b94420888be80a5e3eaccd1aad87b4efdb1cfd69162d5d4e7d93c3deb6d265b575db0d470ca37","ssdeep":"768:IxrWqTSwVrIxY3wUHU3CnY7i5OMBI1Dcp7MaDEHkzmj34OopeAzHJe/b9oq1T/:Iwg/wU0yzkYPp7MgzHF/zET9N","tlshash":"1403f1db7248f2baba94cb25d6229784df67ad4c44d830b8291fc9914cb0f95c4a037b","first_seen":"2026-06-06T03:00:25.037869Z","last_seen":"2026-06-06T03:00:25.398143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_7.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_7.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=69508\r\ncf-ray: a074292e3cb8b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10f84\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UEmbwQptEcfhnJorgaVnOxZaq2%2F0%2BNSY2HFHO36KOxS5qRfKcEeHK8BuiE3zDfieONqqErK09k2rD9jUjtAEHueAPt%2BvetxafpctSP9lVyrAq4iPJTWqf%2BTkfiNf2L1E25N1rNR9g1ka2n19\"}]}\r\ncontent-length: 60000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9a0cc4b15bec6d72a423c692e296f3e","sha1":"6353adf57a986d3371966c2912fd96d3f94f733b","sha256":"65233159d0351c412fb594f53f8aa0ec8e418a9fa1a0c6bd0d5a559293ecb7c6","sha512":"6ad7b3f514c17d985dd4931a26b9b784144484cae1aea530b2a836c3074d13a63173164ded075c359e40e5dc7ecff726bf9d9a0b12f0152df658a9fceeca2477","ssdeep":"1536:Qq7hFnDWD350tHN4vWfzWTIVQRJokS1S37Eu5DB:F7hpWD350LFzWTtJoJGEu3","tlshash":"4e430254c7567f98bb38f6d95ff4e939ff2200047ba6090b3a42602e048b71ac165b3d","first_seen":"2026-06-06T03:00:25.046691Z","last_seen":"2026-06-06T03:00:25.398992Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/css/chunk-vendors.2f717e90.css","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:20.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /static/css/chunk-vendors.2f717e90.css HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4R%2FnA%2Bk%2FSUUZy9pIRx6051MvmBVbrzH83H4DnTwjyuAs4v6xBVtS43WnLOOplGdEm56XHCzVdbNpw58Ypto0bCG39VKBcZgaICiWJjqs7YPQZZ3b3MYptEX6EIAxcVWda73%2BS59SKxUWDHGb\"}]}\r\ndate: Sat, 06 Jun 2026 02:59:21 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a07429171bc3b517-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\netag: W/\"6a1d3e4b-387fc\"\r\nexpires: Sat, 13 Jun 2026 02:59:20 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231420,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b3537beeec088330ac3d4080cfd73d0a","sha1":"f7808ad815d8a1ed017f0da830f1cf6a074e55e3","sha256":"b3337b39c12bc0bbc0f8463b4d17dde4d4d1c2e86648ecb0b4eec88783972556","sha512":"de01447cfaa8e11c4300b59f5dc06a1750f1540cc7e87c1476aa98e3ad185578aeded3baf4aa5341c43c3db605414e144ed99e20e6eba2a52717face6cefa7a8","ssdeep":"6144:Pb9SzfkiJbkZYwh1nAukdDO3Xyr5Ir5eh0dTU6v7f65WCXkb:PbIJoZYwh1nAukdDO3Xyr5Ir5eh0dTUs","tlshash":"6834966b45c1125ca2278e628bcc9ad4c32cc563a5620deeb241791ecfc7fd923da717","first_seen":"2026-04-22T21:52:39.995539Z","last_seen":"2026-08-10T03:45:15.700732Z","times_seen":7,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":978,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_0.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_0.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5012\r\ncf-ray: a0742927fc5bb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 154\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1394\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbiuHofOu3tBpmVC2%2BznKowE559r4yekdzXCJdy%2FbAp%2FTqPYqVdCB2gFOYO%2F6Cm4NE%2Bd3TVVRZc1JbvW9hvDSKfiWNPcItEXMoDo%2B6HDeJZWQVi4oZqko4UTBfB6NyhvreX4gdDDJgY7ymS8\"}]}\r\ncontent-length: 4248\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4248,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d24287044dca95ce599c4ab5e61b33d5","sha1":"2fe34a2b262abe600329bd987534265379f97bd8","sha256":"f94deb8bd4c5869c5cea7fd2ce0884d52d90cb94b73dd579cee566b47d37484b","sha512":"4d0709d3d12d7565438e9567b45027978fb159a86e562b0b07dc4d54c2d987cbd78b429a7396229c1e021361782be16204d7eb462793493fda390499bbf31275","ssdeep":"96:tNyu8ut0vvzUwjv+riPhEum9lLI4OhP1bKGJe8wzn0++SHxb:pWX4UoiPhEH9lLI4Oh5Koefz0+xHB","tlshash":"40916c92cab815d283b7de948d32f4e678d8671398b8dc2ed053009c1b909129bb7ce5","first_seen":"2026-04-22T21:52:39.610443Z","last_seen":"2026-06-06T03:00:25.401692Z","times_seen":6,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/exchange/broadcasts","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/exchange/broadcasts HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,content-type,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5882\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-BSltvCrkttYVNqIAJ0LDcF' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292b1bb17130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JLDwyhqtR99l%2FfYxCDMoxG%2Bj9C%2BxtnR1mnp6eRbbPPAwJHIEXeZX6BLJQnI5HwR2f5fw5Oc1nSHf3D3hIfro7vGUJWqZxvWADyFzOhE8Li%2BSl1IWWXWl2ddX%2BFDOYlWuTp0U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292b1bb17130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_30.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_30.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=81511\r\ncf-ray: a074292d3ca1b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-13e67\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4XA5dNjV%2FU6DN6YAeEuEtD6tEq8eqRopdS4b2Gzxy8EY6LjjHvn%2Bv946bA3z7zf9veGmrIUvLbMiPcckd1JmfWYYrOYcbLrrZ%2BzcgknhmaB%2F03T6k7EmPAyQ7QdIHyfiLtgZVs4%2F8%2Ftc1z1\"}]}\r\ncontent-length: 70260\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25d6a2ef9d3bce343e138a193b13ccf5","sha1":"4e75a013ddf0880f02c63f57431e3f0490aabf41","sha256":"f551666ee22d07eed669aee063c5dce6602b304d527a3a64092bccfa896e16a5","sha512":"5ec5d5537bb76949aa394c3bb498a6959122767feb01e5864a5f026a6abc58ea678e6ab8d15452c6f20ac5ecda52d7b625ba6ae359606c6e36fd9b0c33a27f68","ssdeep":"1536:EVEso+HOTveouczID8tAnP878Tm10c/rV6UUJbFmFNuihfm:SEX+H9ouqIDdPeAJOJaFmfuiA","tlshash":"a56302ed7c2a6ceb244f91934398dfd98f1e7a5c8620892ed70701637614aedb48b931","first_seen":"2026-06-06T03:00:25.402654Z","last_seen":"2026-06-06T03:00:25.455223Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_13.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_13.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=64312\r\ncf-ray: a074292e6cc5b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-fb38\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AxJkizhhNr2TiQ2T9e%2BgrgzegcY7oSG%2BVM3LR0sIEDxDUS9EO7fu83JM4CeMVNt1S%2FeOwDreLpcAToW8ebUtCTEW5%2Bru9M6jb2hc9vg10d%2BMBu%2FqQ%2BzJx%2FDyhmD6UZ9KSDnF6%2Bx%2Bt7seYzNZ\"}]}\r\ncontent-length: 56162\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ac745c01c34d067872d59c12fb1a6db","sha1":"0252ee48ae0286de00810cc54bb9b7963e939b29","sha256":"cea41fff5f0f26d8b7d4695233c018a85a302c076dbdd9e345c2c4677431fd6b","sha512":"89bc9a16f3670d3e003ba271426f22ce1fcf4adb0782056583b46bb1e80dfe4ff4b480742f149c63741c9a4969d450242c196cb447eb59cc4e40e1539ce4db9e","ssdeep":"1536:vDF7Ze9x4nLu4NWvf+fl58NscHHXLwmaWpx95WYeoRAB:vDXOqWXCl58q4Hbwy7LeB","tlshash":"5643025e1c5ce31eed8d682fee3638ce00417fd93715be22ba64188a18c3099e615de3","first_seen":"2026-06-06T03:00:25.142211Z","last_seen":"2026-06-06T03:00:25.404514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_1.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_1.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=78268\r\ncf-ray: a074292efcd0b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-131bc\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vgJh70YyhV%2B1EwL37U2jm%2FIbFrtDkBNHG5qF22o%2BNedmulUtL0p67H64p0kIt8f0CfoCam4bWMqNVgCKv1dEjaCdUo%2FAzu5vt6NSv5Xo90D1bmZskxu6imb7X5%2FgnQNLgNb%2B7TpeGUMc46QC\"}]}\r\ncontent-length: 68400\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3f55aeedd26ab9648508e486f3146db4","sha1":"661a309a6cf21b26ff61734f3217d78cf2df7d23","sha256":"dfe70c00384cc0d7cfbf71217f43f1113f784c6653dab8d03f3075363a84c3cb","sha512":"33a0b40a4ba315971ada464212d1e2c1c19c2e124e50b50188461597592ae91926ff775199e0a8479d8092f70cb32790c77b3eef5e3547b81f40905a445b5e9b","ssdeep":"1536:lAa7f/N1YomurLnlU++XzBa0zoLJv4f+Im0IPAT2pcjbgH0PSx:ll/N8gnu+WdoXN0XypcNC","tlshash":"9163020a1d3a042ba9b1bfff886cf24251bc46a611bdf954364527199f82d6332391de","first_seen":"2026-06-06T03:00:25.326219Z","last_seen":"2026-06-06T03:00:25.405408Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_10.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_10.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5897\r\ncf-ray: a074292ffcf1b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1709\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5qHGr0hCHvxc6WtDXPSutELPmu%2BN6bWRwb0KPICcr2Z3%2B191cLph2UhIlYDNi1hzrGMtOsIhicge%2FUrvN1u0kMurAfiiV5B4oz37hGh4WuuiwoPRaquB6LGJ%2F55C9BaSWX42Voir7Tw0IsO\"}]}\r\ncontent-length: 5060\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5060,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57c9bb76db2f95973635ee63ed841e3e","sha1":"802027ab26a81da063d86b2129d57d18dfee5539","sha256":"8d8590358584fd21c8ab516e40da196c137d9aba566a3925a5bf6931574d0bd3","sha512":"baa54823f8e86147e531460838db69886847a92d7b604000bce6f9b2c2cd1cd3f1b9c07514f558fc1299f5f8ed71f15356282602416e20db8c1091669ea473ff","ssdeep":"96:UixBifUSg3RFkEHuKo3RXrClaxDx5nqp6uJHDvjOUN4brrBkKiN:TxBbSADRHuKo3NH1ZqpZHDvjOeYrrBkV","tlshash":"54a18f46102423f9fd920d358955db66db32b97256a5d0717a538ba8e85cab13c3b2c0","first_seen":"2026-04-22T21:52:39.642094Z","last_seen":"2026-06-06T03:00:25.500389Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/apploading.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/apploading.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42532\r\naccept-ranges: bytes\r\netag: \"f102555c354e6857d7e2892cf8bee862\"\r\nlast-modified: Wed, 08 Apr 2026 08:10:18 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78is%2B%2FNPTYJsNBY1mSef4fNjy06zmy2fwZS45PNXHr7cvYgMXtmI5wnPrZl3ZQW9xNcJVn9AnIRI69jzyTzwtDUgZb%2FxoFAA53X8vk99jKizkZ0kk8LtDuCZg8DtZL0VZ04hciVYLb0c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=77421\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 2759\r\ncache-control: max-age=14400\r\ncf-ray: a0742926db5556b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42532,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"465acadac4a0002553e7ab7928c07113","sha1":"7176a0d5f051ff3c7230af35734fed3dd58d7d18","sha256":"3e38bb469abee96b3aa16b67848da312be27928f0c40e6f424398ac1b488d170","sha512":"319b95b1736cf6a52499cb88ab26ce7be900fd504a358bc4aa4b3ba59638b5a339243cae50c3f8be385b48b6df2f3ae7c798a674f12dd81f88b7a2f35b8d3893","ssdeep":"768:szBQ4OofuD6quuSalZWWv/PQxNqcn7hm33Pm2+HJyLepAsldaWr:sVkoBxaloWXPQvqcnkneUp6","tlshash":"e913f27493b8fa03bce4d013f105dbf4a4603828195d36d7d92d623a90abb03b5eee64","first_seen":"2026-04-22T21:52:39.504726Z","last_seen":"2026-06-06T03:00:25.408161Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/invitee_reward_popup/image_bg.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/invitee_reward_popup/image_bg.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 149076\r\naccept-ranges: bytes\r\netag: \"1ed9f23bd3a645a00f0c8ee58aec4865\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:19 GMT\r\nserver: cloudflare\r\ncf-polished: ok, orig_size=159978\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 862;u=5;i)\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhEBkgYEKBcU1vvq3Y3IMTHgKb7Gkwetc1SNBy%2BdQKbT3uBRePWGTNeKgokUWNUijpXRugr9%2Bd%2Bh0RO%2BP9q6wNF5aqm1tl2IKTjDdnykgaxeNN9QMz%2BpzbqOWSRyP7cskMhBogecRxu%2B\"}]}\r\nage: 882\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429279b8a56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149076,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57c095d7495db05cf1babd6cd595b7f7","sha1":"98f6fe241f77f78e0acd198201c73f066ee43529","sha256":"d4971a847dce902bb51187637ed3425e1ced660d0b6a17eaa3e6f3ff5c1de6c7","sha512":"d8bfdd32ad0fc372286cd4be5052964fc8d0a156b2d9f41009ed19254392e79e3bd7a756c8ca227f9c3adccb7cabbdafa9d50eda4df7caffa7eb56d227111bc5","ssdeep":"3072:+SDytYKU6mp8SVJviW53FCNw1nr/Y9yE1Rd+YOl4prCs0lw+:XDlK1m5biWLn7YME7dQl4prCDw+","tlshash":"41e323d476837e7298a3a1c4362f5086478985b956b3163d4e60f2a81393fa2f3c5f6c","first_seen":"2026-06-06T03:00:25.408991Z","last_seen":"2026-08-10T03:45:16.300579Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_10.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_10.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=80959\r\ncf-ray: a074292adc6eb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-13c3f\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EnIzKOcVs4mPTQq2CxAe0pR9D51h8B%2Bh7HsGIBYBa0X8ur9VWZVmk53i%2F4YFiUapJWrofeOvrJ0epNnff%2FL9EXcg4lm7oA8gDepBAtVBfgmdMXp%2FTUndQrmel%2F0lxxTZ%2FI1XPAUgIr1bD%2BjK\"}]}\r\ncontent-length: 69778\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"542c5d56afa7d235791a0677496e3a5e","sha1":"205ee160ce7e35aac99116be675e8189705a4a13","sha256":"1768c2593b1ff0cb14989d4dcd8aa43aa867c4b2e09f6fe778f17def64832f2a","sha512":"9d773d5a73d90576733720adeddb6c31764d6d24d67dc5d8c93accd0b7c979929e6e901a9686b0af8c5ec78a32381a9003f37b03e1bb0edd58a9cc67d741c1df","ssdeep":"1536:9WiLW2EObPPaHFoIH3Zzx02Hs8Du3e6vkQMynwiPcC+KEo:IiLW2pLyloIpzqys8KXLnwiPcC6o","tlshash":"fa6302cf6b504fe9fb11998be203a1e63af71553571119738092cb8273345b62d8cdb5","first_seen":"2026-06-06T03:00:25.379419Z","last_seen":"2026-06-06T03:00:25.41083Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_2.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_2.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=74779\r\ncf-ray: a074292d6ca8b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1241b\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QSixHHuanLKuyWeHQkGuax2uA%2F9ykCSoN1YPuGkDfomsONU3%2B36i3hoj9Qst%2FY%2FRsoJwgpXvz3uApBK3CuoqgtsKqGNtxubU%2BrHNCk8qeVY64YQZdX%2B9%2BMytwVvuZml2l86t3LKAb0lOMEhK\"}]}\r\ncontent-length: 65518\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"02f2d07e54058cc9a6db401310fb6875","sha1":"60266728c09abae2c98917cc7af7888b0853cd05","sha256":"bb75ade38861dacb70ee0803b3602255a190b5ab1923939a2ab57b6d2aa50d8a","sha512":"a32f8051641ec13bacbf6336335b6bf976528678184e394bd3ba6f4b59362755a57f65e7cc6ddc1593e885b8af3b0dcb9e1ef17d7d8119bb59d26df3e4da38d8","ssdeep":"1536:pFEpJi4UR88O4n6trH1X+jeqVeZplxVpCsaWXaBsAEHYdjt+wF:p+pJi1rOHH1Xh2eZvxrNXaiAEYdjdF","tlshash":"a65301dac1e294730945cbbcf9e74e5b240db1e241d8fe4d6b88354931e8df36a88282","first_seen":"2026-06-06T03:00:25.199306Z","last_seen":"2026-06-06T03:00:25.411752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_11.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_11.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2560\r\ncf-ray: a074292d7cb3b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-a00\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enzienW9v2PduN5bqV6oFXb8GXGPGSTH8BUYaVeXEzqyZKs5mOIblja9vIAj55D7u7Ydq8fuWXWl%2BNDnkQnUGbIlQ8SdS4MDuU2RMYtFWIKmLOUwKAaR5vTlF7IZTM8QBLPdDrHYGxfV0ZS7\"}]}\r\ncontent-length: 2266\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2266,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd7727b3408f7a779512895005a8b32a","sha1":"e6a69e8e08c92834e9f33f85a736d33a8c17c6b6","sha256":"0c2f849442cf150ca4e4f4b6d04481a7c0d647c4eb1814031d6f78d1d6081020","sha512":"2bcd4dd82933d5b53b534d79692102ed906fc0297c830d2c77e6f3207340d095429a36f35832ff3600b987225621472ca0b0e422bc8025e51487117e6626eb5e","ssdeep":"","tlshash":"e8414d85b08a9860d0cd6d4d5b7c6957dad055c37c400b4b25a50742f0fb86c1f8a9ea","first_seen":"2026-04-22T21:52:39.91367Z","last_seen":"2026-06-06T03:00:25.505153Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_7.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_7.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=7462\r\ncf-ray: a074292f4ce4b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1d26\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=81rK9GLGr8TGPs14J%2F0QeUFEKg26zNpeGIGlzBjpFKaS2upzpmqi3Ms9gt0kT6SN5%2Bg5sD9odGGKUzuSye8JjBUuRtoyMIdgZCpkPOJUqT17bzGZnfgG8GBNbPK5Tbrg4Do4lGQcl1xwlhnd\"}]}\r\ncontent-length: 6170\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8e318341eb1327c286748e76e1daac4","sha1":"510bea0e1ee16716b62b8c7012294524245795e0","sha256":"917046adbd66b439f95c306f6fec6042919bade04a22a6540b58e202255d7c7c","sha512":"3ca4ff2bcbe228e03dc5290cf0a82dc5856435b66049e92d89c220915e8ac94db5086f8ea8a6d63f2b807eb8e5bc38b3d8e1a376f78ca04b8a24a5273980c5da","ssdeep":"96:cWfUahIPdbOf8MpNfSXRc8BR6C8xozMz3q16gL7vJNVlwbipuhkXQ7MZWkSa1k:hglbcpNfSXRc83n8EPvEbipk/AckZk","tlshash":"79d1aef43a517dd84bde609dcd1cadec0c231edc5d8c1682704881b2237babaeb6da10","first_seen":"2026-04-22T21:52:39.660912Z","last_seen":"2026-06-06T03:00:25.413991Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_19.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_19.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1819\r\ncf-ray: a0742930bd02b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-71b\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eHPnay0D2%2BtEO3F6f7NSYwTHmIh3SUK4SMAFL2XdHTCDdDFu7KwYQB61x2Xj5X%2FTBPheF4ubPk7b3M2rwpwB4EMs0RiB6F4D4GdTA8YelTSIktLiHpUQT84tQPXF0vPC0g3ZMJyVlhRp45wk\"}]}\r\ncontent-length: 1500\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ded9896dcaf4a546fbfb0317951a6a9","sha1":"10e8022979e6d4ad4ffce8f5921ea10e14339ef0","sha256":"877b5af14f9575858fd79d85a73d09cc64b3e6b5abf3640c8a69b9aaa9e44ea5","sha512":"37ca25e627b30755e6ae88f5671030bc93f67a817157c7125fc70b23712ea1a7d9c105a47acea38e1c996042bec98ba21eea5eebcf5e69a733d2a7af3d59561f","ssdeep":"","tlshash":"15312c34f108e66096a9f6050c2f2f9dab6a1402758bf11c878ab46c7f15dec2a47f00","first_seen":"2026-04-22T21:52:39.431926Z","last_seen":"2026-06-06T03:00:25.439736Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/gif/rank_es.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/gif/rank_es.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2722\r\naccept-ranges: bytes\r\netag: \"85385e992bc117d4e5c9926126eaf869\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:08 GMT\r\nserver: cloudflare\r\ncf-polished: ok, orig_size=7809\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLT8QjzIEnJMCj5OP%2BlufuYNV%2BSAx6LW7%2FI%2FDvwmitKZuPuy4NMu9qKZPA1DhqfMsxiA4GbSyoDvmowjioycVgEXg9AGY%2FKg%2BOv6Po5wrutCCR0YgvbYgJUCb8%2BKPcG2zY132sjIl8Kn\"}]}\r\nage: 6181\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742924aa9356b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8e6a061b46d171e381b8528a3b03b650","sha1":"730d46f949fc0283b68cd6808db28da1c11158a5","sha256":"c5b8a49cebb44f44cd652206f87dcb8ae9e2de5e6beb48f4b67e1428ab378e26","sha512":"ca0f163a181964bcd78c5f2c3a9dd75d14eeb95094c193e88fa7bd2857544f3480e0a6bc26285f8774201848927b4fbf3533d7f09243e76a16024b72bb8dd5de","ssdeep":"","tlshash":"0b513b92739809e62ef41dad28901b00eca6a19ba7f973e259827b409d879830755bd3","first_seen":"2026-04-22T21:52:39.48362Z","last_seen":"2026-06-06T03:00:25.416396Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/wish_wool/star-close.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/wish_wool/star-close.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25754\r\naccept-ranges: bytes\r\netag: \"cdcecbe5d234ca5e40d8ae075a9743c1\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:52 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mT8A%2BTlT2kKbMpqGkVzWDkVNYHRtU%2FWCxosLVa%2BZZRIX6UP0X5huNwmaCa1uW%2FWn%2BmShbEr88M16RHdotYZR3DnhR0qK3IOUA4V%2F6To%2F464xO%2F8vc63dGDCspgc5xlG79RqaacBzNfJ2\"}]}\r\npriority: u=1;i=?0,cf-chb=(244;u=3;i=?0 1784;u=5;i=?0)\r\ncf-polished: ok, orig_size=46740\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4772\r\ncache-control: max-age=14400\r\ncf-ray: a07429277b8356b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"278f912d9969e8f4856385053617eb77","sha1":"cbbd1f48fa9ec02a43c7971099e2813bef377ded","sha256":"0ebe814efe5f95f28b21011f12cc6658be11d828dff019b5603c1acb91ac637f","sha512":"c2805297d3299136c4706a29d1a5b3ba940f8d51ca67fa74075b9a2d99baf5e99b2c880ef63c29453c32f0c2524fcfe3f5307a0a6fe0b2bc0ea9fb6f7b0ad4f8","ssdeep":"768:+0PpKxOH8BP4Hq5ZXHAX8L1lRamAQc+UDAZOpzS8KJ:tPpxcZ4HVsomAQcNAI8J","tlshash":"eac2d0da73370a0fcb3ba4fa57621344db34b189e2e71343b142adc711d919aae17a5c","first_seen":"2026-04-22T21:52:39.937451Z","last_seen":"2026-08-10T03:45:15.623344Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/club_home/button2.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/club_home/button2.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 142860\r\naccept-ranges: bytes\r\netag: \"cc2d474b58a41c2b60a928e2acbe2cb2\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:05 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYgCDFYWm2uTz1M9AwaypQ6FlwUKKAuvr5nGgFGyvBFOeq2osXiB%2FET9S9DbFobaAaMtM%2FzFjOSRJFbtaADBfdzZGzVT0fKibBNcfJyHQMapatd3QLmN27u1RqyJhj%2B2pXgwHAUZr7Cn\"}]}\r\npriority: u=1;i=?0,cf-chb=(820;u=3;i=?0 6161;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=240262\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4994\r\ncache-control: max-age=14400\r\ncf-ray: a0742927ab9a56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142860,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1002e7415f9bda6fb8d8de638e0313d","sha1":"94f908ebed0789e658df646d230ae5eadf7ab0a5","sha256":"d95f3e84527be424807c9e3c78daab7a31ca8749ff566cd2315ac43e1d22e07b","sha512":"d26db84240411f5a534305f3da36fabf7a1d01b891681a8170b5dc2416e06771687f9212edb01c8d1ed093b854f8bad8ce27d9a3d9af5832a4abd7dcdaf84050","ssdeep":"3072:PseMgFZYeI/q9Z1Ku695lO9eh8iFsGPZ5O2xo5q989FuKEVD+ajl:PFseI4P695A9G8iNW2uc8myGl","tlshash":"aad3128deb52c45fcb617ef0914ac15326b0598c83b3cec8376f386522e58ad06bbe44","first_seen":"2026-04-22T21:52:39.947623Z","last_seen":"2026-06-06T03:00:25.475496Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_22.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_22.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1924\r\ncf-ray: a074292e7cc9b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-784\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2gioh7w6JK4hh55laT2nBPaQWjN%2B2lXt%2FG6uM%2FR8y3x%2BFisNm2USQPFf13Zykb8vHJqJ4o9CbOkMgQkEblDFFCK4fjIvIZ%2BybqzqlMlFGvGcJ8%2FYnGVY7gldYQW%2FpXpbiQWNztzrYI6JQqq%2B\"}]}\r\ncontent-length: 1672\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1672,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a3f3c418f35cc03d0f5b50ec08254281","sha1":"6c3e50fa821137c16060cae8e7651f525fb5b942","sha256":"40b77512c68604bdd81936d33535c856f31fe957f109235e03cf1392149d4cb5","sha512":"fc2173b95acb08a8a75eaf516e2522f80cd5431e8f804a0506fb172c2f50c6c66d711313e9bb9735c80ea0cee851b6cf4d85f95fdfb429157f37ca871a662d0a","ssdeep":"","tlshash":"a431f8a376e44d32d4086eecc7f4aa1384248e0875409e2ac260f0c98132c42f75988c","first_seen":"2026-04-22T21:52:39.952918Z","last_seen":"2026-06-06T03:00:25.419524Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_12.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_12.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=65758\r\ncf-ray: a0742930bd03b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-100de\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYlE2qX%2Bpuj7EV4BN4edJOqXjgMuInXiqHWSaRSMhl580wtLg3tQkXypRTB7DWdNumA3nt2e8dgoonUbvdIbBrWo%2FOluwlBznPnprKSntwbEbxVvkZqEUR5pjJjppjCOjGK1hOx8Sb11oJMU\"}]}\r\ncontent-length: 56838\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56838,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5cf7f293733a73567899d2dd7aa3a6b","sha1":"98434c237d2f17db5d4eda9eb4c9f0ab77ce9534","sha256":"834e60a5db0f088d5ac6a711e58ff706c2ed9423e4551da8a3ac6a8d40bff565","sha512":"aef8a6b801e239307e68f1bc2bd568dc1dfb96ca83d672121b9db43ad1f2696399ef96471d6c68ee93771ce5b46e984f8a4d2292bfa7967b63b73075f4b8cbeb","ssdeep":"1536:SNZgFMHgj4go/CWpPCB3v+GDv/Gvh9ldZ41QqG:GZSZp+3V02Av/2lxqG","tlshash":"a94301d3521a25ad9edda2031db9c7a3d0f9d127a1d23d36c49820c2f126ce6ef1496f","first_seen":"2026-06-06T03:00:25.42053Z","last_seen":"2026-06-06T03:00:25.438987Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/signup_register/image_es.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/signup_register/image_es.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 903196\r\netag: \"fe39bd3d1bba4340e54ddc809b146c4e\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZE49ppLsJVwlwPl7oPk0rCXgUdPEUQCR7u3uAKXzrajow5%2Bc6kJp1STM56bafciRFHFutd9kJGkPOKKSa2mz5PoZe6M1ZfEFk3pMZjSWR1taut2ggLo5MiIklvjt%2Bgev4WR1alxG2m8h\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=1262634\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i)\r\nvary: accept, accept-encoding\r\nage: 155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429327fce56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":903196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b813baaecb554d4c73e6f6ccdca18730","sha1":"dae689e41ba395576b9a0a5099ccb2a92cba2109","sha256":"e26752e480cec6f7a9e67a2b5be910d8f8594abf6589c5924f77240a80a7ae87","sha512":"f19ca4a516ecf6493bb801d109eed31e8619b4272c0a54bb2c9c3503feda824a2cb2f8cb4762653faddb9a5be4ad10a1bc0a43b3b86ea625979496683b64e3af","ssdeep":"24576:B4TMd7tfQuzUcGhGqA0DQLtMhSy8BGke1gudWkDaZBpUsVyzV:BjouwFhPHQLtMoy8Bud7Da2bzV","tlshash":"01153309e116d647934d173ed324a0f8c98f427207d29ab1fb6ee49db070a24bb9dd29","first_seen":"2026-06-06T03:00:25.422385Z","last_seen":"2026-06-06T03:00:25.543949Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_28.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_28.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714765$j56$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=6425\r\ncf-ray: a07429331d3ab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1919\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wnx2oVD%2FTsd7KjeevIkimO45xOA1ZOlrUqHqaCoviUpUCx0kKVZJMaZJhLbVc2xhle2s%2F%2F1irzIliZHsD5aadjgXNZLH%2B7L%2BTeqp8lxC%2BABTyz4KFLQgbm3uAI6Yd7y8%2FomxaYAjm7PccWZq\"}]}\r\ncontent-length: 4858\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8aa490346c94c0025c25cc4b94b2986a","sha1":"d1c3c05b5bd1d3a3ecd53ae1aa421fc1b2b6ca1c","sha256":"c5ab401cd83d488bba35906e5f0816a2adf93bf3be7590f8408859b467e95c05","sha512":"14a82f2e8e5bffdd42b9854426b04d37767041425a9832fa90eeb4143205af6501173354a338e8dd313457d39c11569de81ee231c0830ae3dc4534a0248ebf9b","ssdeep":"96:YNLfTN3+UyPN8q5O00FrG4YPl6UKR+HqYTXD4tEDvgmbOn+3h:YNLE1F8aOXytZYkqSXD8mvLin+R","tlshash":"e3a18dde8dd2414fea3374fd2d10a36d824aec14654f8eb89e05c100895b8c17b462eb","first_seen":"2026-06-06T03:00:25.423828Z","last_seen":"2026-06-06T03:00:25.430105Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_29.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_29.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714765$j56$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=6221\r\ncf-ray: a07429331d3bb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-184d\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DXl1j7fjH8loyxZTBfInFe9eqj5anWoHa44j2luHrw2Z%2BytemyqEGOt9g2YL3sPPL2C%2BjtP2lNX8TJXcyY9Lbxq0vaxhDztlOE7VP%2Fg8iaia4KbXNhnBdfyVmb%2FaRerqpmbirifcDHL2Tw9%2B\"}]}\r\ncontent-length: 4742\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4742,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f66627cc49bbf6ee488439bc2278dfae","sha1":"1919cfd85419f8337a376b108c6617b3c23a8a01","sha256":"45daf085d30956f92edfa53b4ce8830de6c3e266614e533ee8223e27183edbbc","sha512":"7a05b519997acca14b1d6f2b23b65eb8336ea4d760d8e0375d345806e61b261548980867db3d845c9842ccf81b2d1ae85972cf5f02e652936e6c8c7a245eaa31","ssdeep":"96:/coRxFA06zs/cFz9nb7rKLA1E0EZM+0m/AsRqBSXCAPVP:UyszsK9nbXKLAyiRMRpXB","tlshash":"79a17d67cdd62a754a32cded6d10714cf23639cb92bd722899d88b9f063e6079030a52","first_seen":"2026-06-06T03:00:25.425725Z","last_seen":"2026-06-06T03:00:25.529892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_18.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_18.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=81927\r\ncf-ray: a074292afc76b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-14007\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pNnd9oknFRiyaLecp0uVvQEPBRW%2BhKGDAiXz032tMm69WwRWAEJ6vrHcDsxOX8ARV9WnVLMFYmPopoxpCTGpx%2Ft7OzjnVrBb7LrUThmfhExwMdi8TZev5yB4CCmWhGCZQu8dIsU5P5R6XOrk\"}]}\r\ncontent-length: 70946\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0a6a8cf2d61587f2682ea773df31d9b","sha1":"3175f862127c78776a3bf38338356f27578e3751","sha256":"b50e02656de6ff47a176bba7d0037c83144da6ff3cd2808c39ebd15126c1ffc5","sha512":"13cebf75b22868c0fe05ac76a5e2cbaa6ad754216a124efed550eb341a872c6b39d3afc50d96a01b0b52be0094e1e4fd89ff1b85e2d92065bb0c1aff327ddb6b","ssdeep":"1536:s6PH/k0jtKp+5pOscVW5PTkIrwS0mNtJxNau8mDQt+XxyWV9+E:HvM+EwpoVW5PTXlnTJOLmDe+cPE","tlshash":"fd63025bcf8d319fd3049bfd9321a3dd83f4a8743216c5429522eca8b50396d9c91e69","first_seen":"2026-06-06T03:00:25.091622Z","last_seen":"2026-06-06T03:00:25.427379Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.163.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:38:17 GMT","end":"Mon, 10 Aug 2026 18:38:16 GMT"},"fingerprint":{"sha1":"A4:EE:F3:BC:0C:0B:0D:8C:E9:89:12:99:8F:58:8F:3D:72:DD:A5:6E","sha256":"8E:F0:72:6E:B0:7F:0A:77:24:9B:0E:ED:B9:E9:46:FB:A7:75:83:4A:BD:C9:6C:EC:D1:88:C1:3B:FA:B4:63:F3"}}},"request":{"raw":"GET /gsi/client HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nexpires: Sat, 06 Jun 2026 02:59:24 GMT\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncache-control: private, max-age=1800\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncontent-security-policy: script-src 'nonce-VboGpLrVHvcr46YIH5QnAA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":263362,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2663)","md5":"9e84bfd3ab4d0f415d70ad0bb1dc43c9","sha1":"cdf807b99c00272e5f44eb0c00e036f393e1a02c","sha256":"827d254fdc4266e693072d912ca8d392dc4ddc3c45953af91ecbea4a0b557c2b","sha512":"82bb56230e4b8a200728c35a409a0255e543d0863c1834e83b3dc05f4e48145281feee437980fe49228b01c83c75763d7ece380644384887159260c73dc8e9fb","ssdeep":"6144:TdjLQ7hxy5ehIJNeS/4MjtIwnB76iMWaKG0f4W4:Tpehs1/4MjesZJMWaKG0f54","tlshash":"15444adcb6e270315222f9b5d43f410ab076a669f0498cacf694c6f5acb1d890173f7a","first_seen":"2026-06-04T03:59:20.095311Z","last_seen":"2026-06-16T17:24:47.883196Z","times_seen":2040,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":147,"dns":16,"connect":15,"send":0,"wait":37,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_21.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_21.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=76961\r\ncf-ray: a074292c7c88b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12ca1\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nswdzoYBNn87H5ksgaHNmEF4CwKg1St%2FDCcJcSCYxcagJOCKjHn8dQdAFOFtnP4aCTCRoW9TpODRBr1v8mLPLXEV%2FpctV8E9L7F2ycTYfsWpxwx6ruGEXb24maKzF7y%2Bf2Pe3cAaeINhQltt\"}]}\r\ncontent-length: 66522\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1d636c91b21e76181be52e825fa34e8","sha1":"df1d72e3fe21809e3bc46e0953688e710c716adf","sha256":"06e13a85638fa2c31d3266bb0b0dce6a74319f550b63802db2b0ccb47161d424","sha512":"602303e5954af1b8a92fe84b5fd27b9e22710eff7f33945561c20aea9bb9d1acb555c4c2224766bbb3684cdb6dd31c5fe28b5051aba7459ffe6bb4b70236d4cf","ssdeep":"1536:7S4p1CTQO9IuT9HK8WVkSGxJ+Lm0UN7vc4rKOIdcvTAWceV:tjQQOU8kxoJcBq7vcdXCLceV","tlshash":"1153025e2309bd2c04202d17f5f714b9a250ce6ad84eb2a614dca4fd495c6b7a3fc9a3","first_seen":"2026-06-06T03:00:25.246799Z","last_seen":"2026-06-06T03:00:25.428935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_5.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_5.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=77935\r\ncf-ray: a0742927fc59b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1306f\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILkMC7v21ZqBlM2fFQYVL2rmYS1yJJk7i%2FmOEziQ2BjXAfQZO6NpoDIJp%2Bx07zcseEuz139LvpgjZTKih4dj2aCyb2yAPYL%2F4Fw6IVGnVXxp31wHZDhaMnf68i9PwsleLJMBUnKjudV8iK25\"}]}\r\ncontent-length: 67828\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67828,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c423288e558e52bebdcf5a65f06aec36","sha1":"3f8c28b3d2ea7f3e7746789fcf338637979518be","sha256":"fbb4b0a0ee88c2de84633b5e6ea82b73ab930ad024bfd296c01fbd9671c1317b","sha512":"a8cc3589e1310d4f28245e15a4be42c1142db6e87842882209afdb512499be3dcee28ed7ed869f55f45ba75764a524f3049c61f0eec23fd17369a2829494a333","ssdeep":"1536:VkAY5krTTZ0wkVvanxQh9UzaxCmM0kIxW2VGXS0jViVyxB02n5Mn9/Std:31TEC6OziVM0kc0i0jcyL0bn9/Std","tlshash":"226302b7db6642fb1be354b09e187790a444e0954bf03bd4cb25725015ed0fe7a3a48b","first_seen":"2026-06-06T03:00:25.235471Z","last_seen":"2026-06-06T03:00:25.429749Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon_get/1.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon_get/1.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10268\r\naccept-ranges: bytes\r\netag: \"b332b5c2c7c71d9dac83e986521226ce\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:27 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=15865\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIWLYEaQ4RRstWwIA7MdXq2tnbegXwuiERfhK%2FemjYpYrn7C8yehgjbckfFlRyrZny22HJW%2BOAXRHBskxSMNDT0uCEHNERQLlhbEzY3UdjFgbfxHY5Clbco0EgDMho06WQeEObj3zKvq\"}]}\r\nage: 1248\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a074292aacbb56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10268,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa3e912fd190d80f1826cff3857f6a85","sha1":"69b5af54570fcf49fcafc759fbb1069df9961370","sha256":"94603f40e3a93914972ad2661ccdd84bf32e98409ff595ed40c0d4df418a3c71","sha512":"895c43a9095137078f3a1f73d81f11ea652a8fd90684c6d4a68279da374e60746ef55fdb5fdfaa1d19c5a7c9aeb9397fa527c7834046afb33939be06e817aad8","ssdeep":"192:u1fzw6Deg14HpQwLUKLNDyouBBVWfqKzHknQMWdG0TH2XTzzot:u1fzwdpQwLryoaBcfqKb+jcqDot","tlshash":"7222bfd953138d85bfb4d5714701b2867be142f5ccc12ba4a34ce4fbb7a11182832763","first_seen":"2026-06-06T03:00:25.090056Z","last_seen":"2026-08-10T03:45:16.023825Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/kefu_ic.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/kefu_ic.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3442\r\naccept-ranges: bytes\r\netag: \"0e32864ffd9e4bfddcc76ff2b2b7708e\"\r\nlast-modified: Wed, 08 Apr 2026 08:10:18 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFb3vJdMWu0uwS91iItalrzxFCfjRoihg1SZdok0SpAb0ONPe88uD%2B9hjKTxbSr5pj%2BWYAZkUL%2B9G4SHclNeHxppxBCEgMtmMoeoP5%2FrmOPAUYL%2Bh3BkbpbG8l20E%2F8gpdECVZlEdGkr\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=6018\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 882\r\ncache-control: max-age=14400\r\ncf-ray: a07429262b0d56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3442,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a2470db8c98fc36efd03fc3f757e136c","sha1":"ee49c8e751952ab71babf1167ef81e0674de25cb","sha256":"280fff403ca4547219daf7a3727ece0789325b2cac19fff4422c3aed74237b3a","sha512":"6bac106371704e0ddd950f0907d5f3a4ed3f1c30ea2763a73ff0bc88d49bbf83faad687acb6803e8d6aa5f7ef2bcb72a65615eb5f0f4502eb390a66b31f77250","ssdeep":"","tlshash":"0e615b0a47c8c559ece7f8005a8f87b179880b82c6e269a861459ac736dc1bd24e818f","first_seen":"2026-04-22T21:52:39.742432Z","last_seen":"2026-06-06T03:00:25.431223Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_17.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_17.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=77597\r\ncf-ray: a074292aec75b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12f1d\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RE6gpdPsLqhZ3ps3pTraAGt5k2bqJRw5P8P%2FEmPz6F2rHXRnAH5x2AdtGIl%2BxHBOZQPe5go6WI%2BTVKkSjICSAhSiK7HQPKsLrEwEeoC3g4HD9z5Sy2gjlkS%2B2UVf9kUiPacsl8ZT0BdH%2BZsS\"}]}\r\ncontent-length: 67188\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67188,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dbe974755f51f89d17b6b2a740d69337","sha1":"c54753038591011d54c93dd3459a7ce5d6db2224","sha256":"3ac2e1e0b3d028202603f471078893671924c145b59ef78cd6cddd09f2fda1d1","sha512":"ab58da5cfd82ea524b9eb593ca3acec923791bff4c8ac771c0ca302eb306eb4bd3402dafb6865234405b8a604c3b7a9ae08e9281ae764de3784bc9889bbcdf3c","ssdeep":"1536:Vd6KBHZjcNzLgd51R3Z01A5akiUwpVH1P/yCanprTO7VDW:n6Kv4NzLgd51RWPLXHZyC4pEc","tlshash":"0a630153af301c4d8f5d7cc4e8fb38ab084b56e915fa61a58b4067e29037b546f4b8d2","first_seen":"2026-06-06T03:00:25.380944Z","last_seen":"2026-06-06T03:00:25.431836Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_1.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_1.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=27332\r\ncf-ray: a074292b0c7eb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-6ac4\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4h1oRcShL0TlnXaQhUlimjdxbPV0uSC%2FBIrWeYr2hqLiBSR7U5vRMh%2BqQnKrkNMvOHaI3%2FNa34S%2Fkk4TnbNYeq3Jv9WpciqEVLBObOtn9At7e8V63kO7TD59cEY67K8mT8oUBtqgaGBVf5Cx\"}]}\r\ncontent-length: 22296\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22296,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"98548a568b132517ed238a4861d8fc9a","sha1":"5b172f33130e15082d6e14487e97fbf671bc7a5c","sha256":"e8981fcab2115108468e4fd70e440f376efe63ab6b097cfdb50e9e02d18c32fa","sha512":"e340c564d37c924abb3b2437d7b2455c9c0bdd9a77723e3f4c5c0a4c9bd0f4a19de8b59f6458aba8da79908230bbb4ccfe7b8e13e0c2ecab8707886f85cfe5e4","ssdeep":"384:PUaFVwj4fJ/MSMAz4cJTCVa2eSRG63j53zVveysyGfHIV8AU18WrPA1kS:PPvp/MxuNH2eSh3jvvMLoNnb","tlshash":"f7a2e14ac099be4491dd60327518da1b200d4ff9d40278fd9dac5d22fcbd397b71ab68","first_seen":"2026-06-06T03:00:25.03565Z","last_seen":"2026-06-06T03:00:25.432585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_9.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_9.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2179\r\ncf-ray: a074292d7cb0b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-883\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQ7RprzFLPCe2LjvhgB%2F4hA5wppufToBHytSEqbIpGm0NWOBB6FjSfv11M593%2FvYMdYldMAGzdNqrN3PWKMHI%2FVqEw0pbRAA6CyRLzcTc6XPY3i3E%2FLy6w1v9SyigCREOM0EZl7vXjvFffMo\"}]}\r\ncontent-length: 1884\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1884,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b0b4fd4373203bd39106a42d29f585d3","sha1":"9e6b33450947f00981ea00ebb42578e00bdf5c9c","sha256":"8b01410288f2b580793233064dbd9a300b043839aa30ecd6e3c63c267f9e8d1e","sha512":"c19a235f7b7184663f13c71098d7754f172ebae7f827d72e1d65e78c770205f2be062bc15eb762b2b590cc4c09227b96f9715bec8fdbe8d57077f2bd20a98a76","ssdeep":"","tlshash":"1741f729019b8b38cd60500a9b0704795da513adf32ed6ce2642c3c94fefc87e6ed222","first_seen":"2026-04-22T21:52:39.936366Z","last_seen":"2026-06-06T03:00:25.433514Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_10.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_10.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=64802\r\ncf-ray: a074292e6cbdb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-fd22\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=olkDssDLmFaxb5MNYwSMy21rrKtb9cJHbS7NfWrQEQwY%2Bznc8nKFwRo3cYgPHGvzfS7hlbeYUTi5WAUWXEUxGrNJJEpoQRKAHqU7qVwxDHpMl2EDWfNRr%2FISjJ1gvrGyuuUZSvZuVs4RBNHZ\"}]}\r\ncontent-length: 56590\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4be57b1b0a111facd332e5bc30db8f41","sha1":"a6a20a7525985cad346745ccd1ff3c43556aeb92","sha256":"8bcf9fe4358fb7dc8c2afbe4e4b9d1461b35aa85d00093f251de6ba9c7b09878","sha512":"3bd111cf2788f939b4c554f79935e025d037ab158e720ccc1a04efbed4a6c6d254f19849268057c35ad4b9e8dd944291d8a89deaa79acef7d9c783bc577598b3","ssdeep":"1536:4DIzdVJYuypdF0yHzHas37+wFCAxYQrcG2:LzbyHzHZL1CeV2","tlshash":"97430217401bef5df354b839b2e093a059df5a622fcc318c97c7e059df8f81a0a528a2","first_seen":"2026-06-06T03:00:25.434212Z","last_seen":"2026-06-06T03:00:25.4535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_0.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_0.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=80084\r\ncf-ray: a074292efccfb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-138d4\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1UHd3XHsBhHR0rHXzFPVTH87w3LJRP%2BLvq%2Bt%2BccRb%2BXuUHAS2mDTY5j%2B61yL1WKKG4bv8S%2B9yi55nykR%2F2bL8k7PpxLOPoLc1HOEA8l9KK834vEMS2xLRyPOuGAEBTFJDMONg9SqrS7vUh5l\"}]}\r\ncontent-length: 69974\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eaaee1b32996d5ee39d228023faf053b","sha1":"ae8233cf5c79afdbb95509ba8284667824aab505","sha256":"e06b95a2f7010fedc904f5d8a715a119eeab85438a7f1667ec415c7c7df1fa43","sha512":"4d931c236a50eb1126e1dc5a09e21925ce25db6070ba0f2a0647414240f968b4bd2c5133461a160787dce931758dfb6dd3b0a613cc77ea093211b37e9418792e","ssdeep":"1536:yEOKDOQGMZBYWbqih2/G8GAvuJfv2Eeo2dbBE4m4F3OMcrGwstWzeL:yBKuIq+PNJfOExSKHA9cCJWzeL","tlshash":"dd630279cd644694b93d8d3ae662eeb57444e4c253bb0d6c9fa45b09b230c7c2ccae21","first_seen":"2026-06-06T03:00:25.435912Z","last_seen":"2026-06-06T03:00:25.516681Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_11.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_11.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=66092\r\ncf-ray: a074292fcce7b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1022c\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aHnqqN0nGdcoqtvBiiL69xqHVrJB60lkLKR7C9DjVpnoWT00GQ5hLRCU2%2BhoC7EANZ3bZrnYTFeIgZm5qM6G93HLjL00EaNro%2BwO88NsgRaY3kwwAHYhczJDpmoTmKy6BBw%2B373%2F10PexcT\"}]}\r\ncontent-length: 57610\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57610,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5e575fdb77f11cee6353dab59c6ee71","sha1":"88af5fde421fc026ae4c11cbecdce5b5b4d84e44","sha256":"6b4107716d4e936ae47bb758bf71d5d6bb8b5364547f323510545d378c7de3df","sha512":"874128ab5b4d97098db5980438ca7d95a97bd48acb52f7bc4c0a06e4e6fca146c012c23226885baa52fa2002c90ae21dfbfdee59d65dfd1be2a9d0c825283f58","ssdeep":"1536:QyRIKeRQRbFwO+D9YG+ah9xK+bsol0JBO94E:MKvRbFwpy+h2Xs94E","tlshash":"7d43015fc980f517903471b841b50a006d4a4bc46fe3b5bf17723b5e975b1e88aeb0ba","first_seen":"2026-06-06T03:00:25.437377Z","last_seen":"2026-06-06T03:00:25.543119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_5.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_5.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=55972\r\ncf-ray: a074292b0c81b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-daa4\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=isfmkDdYjl1dFwce%2Bvc4gkLHlOMaH5%2FMw0E%2Bnmw1UhiaMft2enIF9VXaTo6oI%2F%2BamW%2F3n%2FsB3N1NVgIzOcx3yMTLpYgVe%2FNe3aKtuM9dsKmcNGmj9nKm4OvCzQpfSUDzOyDwEYEjuI%2Ftr8GR\"}]}\r\ncontent-length: 46510\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7345fbdf4b99604f45378c34c08e695b","sha1":"57eeb9561330ab34628521ee0f2d39297dceec4c","sha256":"86afbe1f494ee801c90ec234d77c0126cf32854bb8830cf081b3649c014c74b6","sha512":"e9c253868b4f4bbdbd7fa2f07f8171e97ece9c53c3c5a8dab1091449752475f767b7c9ec53daeb97bbbae982b7891bdbb34e77ca9a53a7788471da0e37dea724","ssdeep":"768:RABtgoOO3qFm4tjDibdN7FProBJYh+2DpSzyRwmW602WgEr5tCXkC0lldqh1Rn:xopaIy+TZiYgeSzySmY2WNtEx0xqhz","tlshash":"2f230180dd5d46791f07df7d8a93cfd31c538f8987208a80ca208a55f6dc7a92318b6d","first_seen":"2026-06-06T03:00:25.313175Z","last_seen":"2026-06-06T03:00:25.439446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_23.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_23.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=16200\r\ncf-ray: a07429322d2fb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-3f48\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gPnCi4kfAO2wIVw9YpYbQeDP4eo70OyauS3zkU7WtuvxKZXyx3uoOTa%2BRjLKldWhKmZWxu%2FdRFkP4utQqMV8SUwsajNP3B3du1Kc4jlB7ZPs7s9mo5tfFKAq7JQ3EuNjMJUeb6subCqwq2JF\"}]}\r\ncontent-length: 13334\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1f0ee14c57e082be403b63dedcaf84f","sha1":"85d40c4f887ecc2e8648f017aa6c9199fca82227","sha256":"0ae638e49c2995d38b82ea17e412915fc7331a51d549415af1120d238693223f","sha512":"0f7c28671678b4abc93c1f5e672ce61404f0757e77e621a7b383a91ec59871ba7308cbafa647450ed7069d56db751dc2a0e6722d572bcd8a75ce04c79c53dc64","ssdeep":"192:Wlrdne00WubKsCWPkP5y9jWYyVbYAZi9IHkF2HiUuNUxI4PNEK7Yi8d3/JPQ0y:W7CbKEMSSJBYAZREF2HiS5yvbJPU","tlshash":"a752cf2283eeee6910e45c3015a913f32bcac2c667d9b075974af330a66f61d0dac04f","first_seen":"2026-06-06T03:00:25.062908Z","last_seen":"2026-06-06T03:00:25.440301Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_24.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_24.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=14759\r\ncf-ray: a07429322d30b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-39a7\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJ6wIVYbGhr6kVtlGVFAAF183V80G5r2gNmnGyT4UTJ38Q7Mp7r4jQ%2BtpAUBmaI8Se8etALwCdbbtp7a5mGu2E%2BRqhHwFQhrsVMifZajv3kBZ0mTv5roIUiAwxazBle42hxl82NPu4hZhpB9\"}]}\r\ncontent-length: 12098\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12098,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf90611b8807eed3dbb00e3844ae752","sha1":"a62a299f00681ad8de9fb997df24d006761ea0a0","sha256":"bb29214461f434e6b419de361a696cddf5f26a352ba459095849060e27f22a64","sha512":"8fda8d6913f8f84d2bd644e8ccc631eac147d771a4bd9164530b0de1a52bdd2b07a5b081f017db6e8633d364b14cad4acae8ad0048fe9912f9c054e14362530d","ssdeep":"192:uVoRg2fzgqJjETz8mYTCjGASD2jvFyarhMc4ORb7yWJAU5jgiwkndXF:uegSMUa5GAY2jwaFvyrUGkf","tlshash":"d242d0206f8344b30a5b0d5da1e3d7212e0d9b6144158e68c33cae7ee86b57afc1e9d8","first_seen":"2026-06-06T03:00:25.441107Z","last_seen":"2026-06-06T03:00:25.496299Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/js/galabet.15153ee9.js","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:20.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /static/js/galabet.15153ee9.js HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JzUa2zJME3%2BxwERjJM7uQwS5eNIEwAXOoO1PVa2o34RhoY826oR3hgWhaIIQZcIX%2BrbDIoDDjRs9%2BL78OdUkyH%2B08XflwwiRp%2B5xtV6lnqqEwvrTrkrK9PDTglfMQGPT3OQkpSFT3CZoHFYj\"}]}\r\ndate: Sat, 06 Jun 2026 02:59:21 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a07429171bc2b517-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\netag: W/\"6a1d3e4d-2c96\"\r\nexpires: Sat, 13 Jun 2026 02:59:20 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11414,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11396), with no line terminators","md5":"48c33b754eb07d71c5925bc48baa8431","sha1":"19c16dd745c5af584c0db54b7b83e7872ee3dc61","sha256":"c4ea1b44c9c49b33638dd102f137557656837b80e7318baa6b8d21b65ddaba10","sha512":"f5ee4fa1bff44e650a13991a2ca96495de7a7008470f6f197dd38e314f1ad60fab33dade5dbb8cf36fcb990faeedc7d04cf95212a63ce62480b8755d60abbbdb","ssdeep":"192:B5vJA/+PT/w9/UZwdop6zgkKZwmZ5KSXbZ35zDb7PjHPb8N0lyatTtQ:B5vJA/+DRwdA6ROwmZ5KSl5DXPjHP4N7","tlshash":"5732eaecf5a2b5b9178300e04cbf500af63a196db4067093d399d8f2397ad9a0753f96","first_seen":"2026-06-06T03:00:25.135198Z","last_seen":"2026-06-06T03:00:25.443024Z","times_seen":2,"resource_available":true,"data":null}},"time_used":984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":981,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_12.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_12.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5012\r\ncf-ray: a074292afc7bb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1394\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ru80igzaa4Pu9di1LLShEbGD0ZC6Jb%2BXDWEZywpGtVcQlOX2wj1DuOPqbBlSFCgoMF0VQXopp%2FHSDX8jgLSf%2FPnh1BrsKW8dEqAim%2BvwjreshwqFRcgw3yzNxAU2IlmbGCoqn6fsRnblnGx2\"}]}\r\ncontent-length: 4248\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4248,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d24287044dca95ce599c4ab5e61b33d5","sha1":"2fe34a2b262abe600329bd987534265379f97bd8","sha256":"f94deb8bd4c5869c5cea7fd2ce0884d52d90cb94b73dd579cee566b47d37484b","sha512":"4d0709d3d12d7565438e9567b45027978fb159a86e562b0b07dc4d54c2d987cbd78b429a7396229c1e021361782be16204d7eb462793493fda390499bbf31275","ssdeep":"96:tNyu8ut0vvzUwjv+riPhEum9lLI4OhP1bKGJe8wzn0++SHxb:pWX4UoiPhEH9lLI4Oh5Koefz0+xHB","tlshash":"40916c92cab815d283b7de948d32f4e678d8671398b8dc2ed053009c1b909129bb7ce5","first_seen":"2026-04-22T21:52:39.610443Z","last_seen":"2026-06-06T03:00:25.401692Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_20.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_20.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=81789\r\ncf-ray: a074292c7c87b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-13f7d\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MBIhMvHEw96snZ6LBKAfWAggvfZlvdUj5SDRyk%2BDPKlFmyZ1AllyikpGfJQhtuxJTglk5AUYiSosbKDjPkDcr7ad2S5yHaR5Jn88%2BJ0fyi%2FN4tudrOCa3WtDKUj%2FElsKOEO55ZE2IlfmnQW\"}]}\r\ncontent-length: 70348\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70348,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4cb4ffc25bc2898e263be952eb6e98ba","sha1":"0f7392b55e79790c9cb2b2ed16600a42420aaac6","sha256":"b2aaee234df11942204ef9a638bc253dc313515268624d3fff908cb92443ccd0","sha512":"351fff39455c58b145c6ee8b39ae3b1fb7102be4c895f3a561f5b6ab417226394ae5caeeda947f8a1e08e655a281108d2fc0eb75e71f8728465b0b7eee61fd1d","ssdeep":"1536:AlgizS1edhKxInQ1JafvXKXVbOquDZcqyb5ix6k6eY8:/r1uhjQ1SPMVbGSqc5ix63eY8","tlshash":"876302110e02ba7d6f891d9c64396fb9c7ed140ad49033015bb1ab31a77723d1ba9e1f","first_seen":"2026-06-06T03:00:25.333206Z","last_seen":"2026-06-06T03:00:25.443845Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_15.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_15.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2234\r\ncf-ray: a074292e6cc0b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-8ba\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UB35x8E%2Fkaf3q9ybiPADp0ZhBsMfn6Iy24XYSGbwyjSVbJ6lXK%2B3PaKEfJ%2BAjaTIBmkkK1ZcQSQWND7t9KnSzMdZWyHuGum4cJ5XuEvVj4wm38MRLZBbIVjIcMVcLN2ohEoWTpYb0oz5GjAQ\"}]}\r\ncontent-length: 1956\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a591f33ba8bb67b0db375213f975199c","sha1":"fd75f287f5d5235d90905f0f0967d165cb6e6f8d","sha256":"41f261f4081a84e5595f58564c2123cc138fbd60fc9558db97be9001194fa0de","sha512":"099a08fddc451c8b07230406b068880a1b4d1497bf8251fcb05dfbd5b8d3302ada5a33f0873a5168fb0a3dcbac6117b56c2f625582da7c39aec73347544c8ae6","ssdeep":"","tlshash":"98410ca1c5305d1f14796a6d62414d5b337d853872166ad3726b01be355600630cbf4b","first_seen":"2026-04-22T21:52:39.709737Z","last_seen":"2026-06-06T03:00:25.565551Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_11.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_11.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=6645\r\ncf-ray: a074292ffcf2b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-19f5\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L3SbGIi6%2BRE4t4aeqy%2BoqM6OQE8hpMHA693%2FliHkQS5Ez%2FBWud32VUlrg7Iiwos4ySVf5NXOwvVUS2SvVvNd%2BkAYdMGHDBUTKnrJ320oQ%2BtiIDwgOjM%2BBc8Xp9dP1WoEP%2BYlnoXZWRC9BEah\"}]}\r\ncontent-length: 5324\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9c57319e4c93cc209fc8e241442f92ef","sha1":"ad318036929a1e071ac800404c9f312408aa2a53","sha256":"0ad8addd54f71a715fa199fc86b7566909b79916d2a6614a6f2ec5d6a2355918","sha512":"c7bb7680c70f23a0cb9c1f9e655f769bcc0c13c26df7329288708972320cfaf8bcd0a87c73892de8a1a2a8faef86959e152ab02c3f4d96b90e941d763b2aa76d","ssdeep":"96:zlbojrW19g0xQzgHZ7pORdahcKjThtGRtmVV9kj+Li4QH15nyoYb:2u1xQz6m3fKjTb1V9kj+O4QV9Eb","tlshash":"3db19e762a44ccf532a16147aa1538c4192b06ca034c627d3d5968b53b36abe6615fc4","first_seen":"2026-04-22T21:52:39.775275Z","last_seen":"2026-06-06T03:00:25.501363Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_7.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_7.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=69916\r\ncf-ray: a07429309cfbb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1111c\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VFinjEd9WeDNlMvaajYrpVwn3jBDxXbCtvQOCu0%2BlmH03Jw5yzpAk78D5g3MiC%2Fg968C5yyJUIEFOLKfSLYHjobZSWpc%2BxdGxqWC07xz46T95o6DBEqOb2K5pNEZCiLCCn2CgCftB4N7cGo\"}]}\r\ncontent-length: 60802\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60802,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"931fe10f16ef0ad2d4754ae58ac2be41","sha1":"b1cf898d309ffc95608f0c091c75b67b4a6de70a","sha256":"39233ba44d71e2f2a8df43136f2d85289269b2af0d4418c298cfd24a75d7df81","sha512":"3500a8f00072d707b148385124ba40f989cfde924af1c313c597ab34285c807971086bc574baa79ac6ed0e8d527b9c2a3a62a5f385d57367c58551a0028592c1","ssdeep":"1536:EcF66GUK1zZ/goPivCsC+HnRzrStAA6cwgYMu:BI6GUK1xB6qUqtX6XbMu","tlshash":"4c5302973242bcb1b31ed4cda37da958a14bb20daf4914e8d53b21ecc90329ddbd059e","first_seen":"2026-06-06T03:00:25.261529Z","last_seen":"2026-06-06T03:00:25.447734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/app~tooltips.ab7c6031.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:33.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /app~tooltips.ab7c6031.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 87295\r\nlast-modified: Wed, 03 Jun 2026 18:06:42 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: JzV2ZCwMzf5d_ZmfhewyT30mXae_tJqN\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 02:34:35 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"d034784ee91a51586fa245b834d3dfed\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: fsz4gMHtPfa9Fbr8PRdGUsjsJFdWLK72bKQgINEUbeuvvD1BMzPWYg==\r\nage: 1503\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":366856,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65457)","md5":"a83f25fdf5907cf6f198753947d347ea","sha1":"c1425346088a2250f5daeaa9ea50d0aacb0728d4","sha256":"59c757f89ec70bb3c47bfc4fa91311552b6921fa3d13fb2f9be3feaadcf7f185","sha512":"65d2fc0974f4ea9928b0dd6a09edbdbe5c9a25f6492be77a54d5907102d7e9309e32f8708bb1ca2aa5896e3f7595072dca3b71e460e5b534370fd917ddd81b51","ssdeep":"6144:HmQi8czmedwaRr/GiOugkwYQ1lE2NvrTxVelN/S3X:0PRr/GiOutLQ1lE2NvBVeL/4X","tlshash":"017408c8f1c27468a7a7502880af050eb33eb555f54e45a4f1b9f8d4e8ba1ce5123fad","first_seen":"2026-06-03T13:35:50.726789Z","last_seen":"2026-06-08T13:12:55.963589Z","times_seen":423,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/home/nav_bottom2/4.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/home/nav_bottom2/4.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 796\r\naccept-ranges: bytes\r\netag: \"5061c225d957ff617351514f3d500bf9\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:20 GMT\r\nserver: cloudflare\r\ncf-polished: ok, orig_size=1707\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mZ6G5Xj3Vune%2BDPFt4biC%2Bax5oh16kisROn9SYRXUgCSifhxIwM%2BOLajktG4eXOjDrorhCOJgxIlJoWEe5AEHqxHUc1m6QAEB2GN1ercfXQN0Usmkao0pJT0tT5c9a78Lkri%2Bu0FW%2FU\"}]}\r\nage: 4247\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429266b2d56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":796,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee38c6b3ed03c8c4867744f6a93f8e41","sha1":"2fee6bd743cc5819b6e349693d4e78c6667080a5","sha256":"892a842f97b77aa416939e9e0eb962158e940565323dfe04ccfe3a2fde13c584","sha512":"97db08dad8b3d9a66655e1e7d4f98e1d74e038e54805fc7a3c45c5659db68c6c1c293fabe90f6b16ece2590ea9c24c2d5e5cab4ee973d6b4182993376e9dbc2e","ssdeep":"","tlshash":"1701c52026364249297e9ac1756ed720763cc92843305cf5af08e88f2f0d58a5f582cc","first_seen":"2026-04-22T21:52:39.767374Z","last_seen":"2026-06-06T03:00:25.520029Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/img/image_es.09b2117f.jpg","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /static/img/image_es.09b2117f.jpg HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=1,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/jpeg\r\ncf-polished: webp_bigger\r\ncf-ray: a07429278c53b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 154\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4d-4175d\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:49 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rt7BAKqutnLEJYgXmpedUTzWJfmi%2BT83tYzx9hr9N6JqbjU9ZjuRVRj0PmimMij8wzJp0%2BAFACetwaL71pqLCa0l0AfB2u7w%2B3M8N6XYkK6pIZnUJnwDUsDXk4MO9etiCRqPO7cjPlWYT9pS\"}]}\r\ncontent-length: 264082\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264082,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x828, components 3","md5":"a7a238cf1fb44ff01c3de6edb5ecab22","sha1":"7aba5f3fb1a08380dde4bab2661580c2a23609a0","sha256":"232c51229c07c28aca2538b3d01540d30e441fff8b5439cd8d7270120a9523bd","sha512":"13b07f1985bd731be5f11ddaa4b0f2f6710d3eddb0f682af47f9dc16a3d054fc1dca54397a7b3f5de95b8d7acd89cd6e8ba42f3cc6b66e43e3ccb5164e8f0ba1","ssdeep":"6144:HigaUIf4SCnGPynWPoC6+YAJQ6TI1yOd8VGAyKCr6oYBkHuUEUmtYs:Saos2o0HQh1g81Vr6rkH5qCs","tlshash":"2d44134efd179cb1b0f15936dd2cd2abe28415292b2d473a17e16eb11ecb9078434b47","first_seen":"2026-04-22T21:52:39.520468Z","last_seen":"2026-06-06T03:00:25.450988Z","times_seen":6,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_9.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_9.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=75937\r\ncf-ray: a0742927fc5eb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-128a1\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbX315J2rdUh4u1qRfWr%2FybiulSakvpE77WRjfvVc%2FBLENlCz0BtFWGSXiZnGcDS791mls0AeD2xFx6yb3yoCfN4e%2FtLJ8ebHBpWse8uJ6W%2Ff0OuB3QPvUQudrqS%2BQX%2BzTUVLDGHUmZL9xHd\"}]}\r\ncontent-length: 65632\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cba2d6ddabc136673fb949077a2a55ac","sha1":"059d14a9f94dde7954af9742bca6dd272f003f7e","sha256":"e54501af54419837a8e02056ab5547164424b384f13138e2b605ac210980c50b","sha512":"d3efbfcb2b1b35a7da7f4f753012c0bb10009d6f95f7b5142a00914d6ab2deb4bfe8ff529d1c8bc485a0dcc7bab03fdde593de3711529d35aacda6f35c954a04","ssdeep":"1536:BO8fMohZF3qH+Ax3ykvhYwwhh2bVWg6c0q5Il2:BTMoh/qH+Ax3ghI0q9","tlshash":"065302197f47a8afd593bdcbf3bb5657f1c48ddb35880e58120a02c9935e02a6148b37","first_seen":"2026-06-06T03:00:25.41572Z","last_seen":"2026-06-06T03:00:25.451675Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_10.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_10.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=42663\r\ncf-ray: a074292c9c93b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-a6a7\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ja%2BgC8tEgFcXXDqdmYeU37YdlXOxCEKKtxU42ee4lO2gQhswFOKrThiBSZaLwl8k3LrQw%2BM5basOWxe1vvmr3rknkrVfUtxYg20QZkyKao05Cbth%2Fz7eKRWlW1kf657Twv%2B9xIpAxG74GsY\"}]}\r\ncontent-length: 36854\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36854,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e2675b3d42af7f2437c599682f2eec03","sha1":"322072ba7d6be3705d7e543ba0666b25aea57caf","sha256":"5d9c3214c151fc7e0883a7c06f6adb990546abbddc57c9df4e64a54e62f34b6e","sha512":"08e659d6a3d41e827934575643d4681855ff367c1568c87efd63954a97274ae0a2ce6bcf6861e42613bc8211c33fb840fc0e2f74c2624520e9f7b1555a83a946","ssdeep":"768:p4Bnbx7yVny/9MehydAhM76NaoB9GGC7O/VAw0teBvhG4UVoE:p4FbN0G9MeFhM76MoBpASVDi3","tlshash":"36f202d19443c9bdb85b1e164f611af2edf98a10f20e2bd7b382bf2dee499324405990","first_seen":"2026-06-06T03:00:25.101629Z","last_seen":"2026-06-06T03:00:25.45234Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/gif/vip_es.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:22.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/gif/vip_es.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1256\r\naccept-ranges: bytes\r\netag: \"73f272dff09c9da4dad6a203d0b99962\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:08 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocTdgaoVhoe4U%2BbHForWnwFfTG1N6ZBsnf%2BnFi5xhjsqyA9eoh9GDCpaXRU%2BrTqH7rqSRpE5kXWyR%2Fx4mbzF4%2FRIdEQVd05P0krOo4WPxjDMb8a%2Bd%2Bz7SPpvD5O5t8mmJqqSobEbsFuI\"}]}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=5299\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 3243\r\ncache-control: max-age=14400\r\ncf-ray: a0742923ca3a56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1256,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"067c8d1179b06483f4fdd7b87d3e83fe","sha1":"88ec71764a283ce6762286c76d5c16765003a1b8","sha256":"380a25014b2920efb1f893215d0732dcad8e8ff6e66fae532b8aca63ed29ed1b","sha512":"43f56d8ef63d2539786a30dd28a6e0914c06f476e8eb81ab3347a8ac9878dd1ca7e8300542ef58a8f93eab3acf34619a595d6163e971780c245a86dbd4722fbd","ssdeep":"","tlshash":"ec21e732000a86454befbb0e34861c59ab3c0ecc1685233430afd1f21d40750307f0ab","first_seen":"2026-04-22T21:52:39.93125Z","last_seen":"2026-06-06T03:00:25.519249Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/jackpot/bg.jpg?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/jackpot/bg.jpg?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 243732\r\naccept-ranges: bytes\r\netag: \"3d23ff561c5c73575f8b9d26aa5553ab\"\r\nlast-modified: Tue, 24 Mar 2026 10:03:24 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-polished: webp_bigger\r\npriority: u=1;i=?0,cf-chb=(263;u=4;i=?0 30954;u=5;i 104355;u=6;i)\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMpClafFb9920Ppx6O5oqkxm4CCGokAeawWlbf%2Bmqo6n%2FKFZfgiINurFwp%2BefQD7CitCSTjspYWiKd5FKOvOsVC3Irf%2FnGfAY%2B3E43snQdglBBK0TGYAxYC6v1Rby3iRVJY%2FaktoyiJf\"}]}\r\nage: 5130\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429281bcd56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243732,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x1365, components 3","md5":"74b2d21ce0262a73501b38858d89c58b","sha1":"43cce8cd9c8524fa06325e8014d214a190b42254","sha256":"f6ff8361335e0f5a711859076571cae580b7fe7b4e406c826f39dc7e4001a0b4","sha512":"c900423ebec4b4d049ebf75495c9affa512214801b4a1b2a146a10e6270d2a3441d9c01fa235c06b39b4c9ea5f5e1b77970b4bc53e6e2529b8097a312d4772d4","ssdeep":"6144:YDxNp+1HiqTzzwuckc0yfVsmC1Qthu6aUoXx8IbLM:YdNp+1Cawgtyf6P1eV2hts","tlshash":"433423bc44e67c35d0bff8dde6ba8738dc050903aed6a7121c9fc6591413d68ca3166a","first_seen":"2026-04-22T21:52:39.949176Z","last_seen":"2026-08-10T03:45:16.021621Z","times_seen":7,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_12.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_12.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=32735\r\ncf-ray: a074292cac96b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-7fdf\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYHTkhC9tEuLIvRE%2FsqfS0alAc3SSF5E13axh2DrzvarzBXl8XA0pMmXhrXaQlzj1a61F11fIgrLrUWh4klv93RcWyvQvckuwiHwsDVmUNfPmPNTjBg9F%2BvgUjJS5U5Q0gRP9i8S7V43GhRR\"}]}\r\ncontent-length: 30112\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30112,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1904c002e1264227e3bc0a2d8777cf42","sha1":"1088c85205d5cc8d1f8a9bf3e0f5c03e75c89bee","sha256":"5b3dd4b90445a7cb643e811cb50b11cd788e870ab591ac8992320e0573cebbbe","sha512":"7c060aa6ce010009167fa0ae4782230d82bcce802f8b98316970a7119fcdd4c4ca8f8bb39d3e815c9059a718c33dbc94ff6af4728a2e593d8b2a84ef7e4d924a","ssdeep":"768:1DGzFtI8MJA3SnkHnNCyZFYDT24oIOdDzhI034:g7I8MtInN3cNOdnhC","tlshash":"64d2f144dbf7ab36e62085d6a773ef1cb3784c1c8b7852399ac120c92b7c047b676211","first_seen":"2026-06-06T03:00:25.455578Z","last_seen":"2026-06-06T03:00:25.509538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_2.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_2.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1942\r\ncf-ray: a074292cbc9bb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-796\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8rGlhw3ppmVYcEmvkwSR1B%2BUish25pW52PM0VXO2vvXeYblbvk6zhMRok7k%2FxuBZ7FNJhFmo6LUNzSi%2BWRFP7FfZxy4ODrrJiqqtEukce%2BG%2F5sJrdMXMDF2Cmx2oAIJ%2FQfdjq6nbtyH%2BWVl\"}]}\r\ncontent-length: 1688\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b9f1c73e31c74b97e2456038fff43fe","sha1":"a83dc5c9659add8db6f1cef82cf248955d045498","sha256":"a8c38be2a2afd1296aec1031dfa0505e2202932105d047801afb4820162db8eb","sha512":"7b71985694243c7391db5ac188d9dc923a80fe908f98e654376d73092623f1dac0bf69882c9d27d11cb9affb460c82e53fc9e8e825d6bc4f9692b164f7d4534a","ssdeep":"","tlshash":"dc31d6e1f27b928000a98fc1caf329a52a338f00d6b6ed00f8573e8996b902d50c4cd6","first_seen":"2026-04-22T21:52:39.835189Z","last_seen":"2026-06-06T03:00:25.457139Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_5.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_5.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=66166\r\ncf-ray: a074292f2cd5b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10276\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dcsSE4YNHeQIljxEDpTNV%2Fi8c740za9sN1fasEaTuPc7kBv7U3RIabkHQdbGw4ekrbaTkNsbz8oMd9lNTRo%2BUG7FgCQnKSwuZoalv3jDOze3vC73FWZ%2B%2BgEOnQp0rYkhW8cxk%2FqgirVGSIu5\"}]}\r\ncontent-length: 57396\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b867fe9f55bf991d61fc21b2a2261c64","sha1":"fe563e8273cc246de12361add9fc8a056eba1841","sha256":"d7fc698a14d3b509cfc2b8d98293e81b4e6b87641440eb20b3079f4079182dcc","sha512":"de39af05708dc23d9b8463e19ff85ed49e224a6230e7dc9434787bc31e3bde3021b4bfdf15a891668aab9b70e99bd936997d0ac9da5aac2b3c19200ace59652d","ssdeep":"768:Zg0o+noQ2kEpNH8iujs6lpjgICcZHczNtDXe4dZPlxK3oR7pDivXZhcbpD1tT83c:uXOoQ2jNIs6leIR0de+xK4RJiPGD1Fr","tlshash":"fe430256416639f271b469b0881b33a22c1f2fcd176fad2b766ddf099806f47770910e","first_seen":"2026-06-06T03:00:25.358113Z","last_seen":"2026-06-06T03:00:25.457708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_5.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_5.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=69824\r\ncf-ray: a07429314d13b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 145\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-110c0\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pnz%2FQOc6EwUkRGxmUGYdz%2B8h9RRwKKJ89ezW2bgQ31YFo6KAZfCJJSEZFZo8Z2aZYA%2BnGAcsbc9qAWFYpaXvmgPICOlE5uKv51W28XciF8L3v38mDDwuNELJzea0zryEJxHDtuiWJlA5bQr8\"}]}\r\ncontent-length: 60058\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60058,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a3a4030b349a7f70784257b969448ec","sha1":"aa3aedccb1d544ba7f8cfbc7abcbf651b722f34f","sha256":"925825dd47c8a0b3ec10043f0389e21928cb34e9e5b0aae673899bdc8ecc9265","sha512":"2c82b9d6bf7ccd3d525de571628c6a0197e1a12b58e46b353db77fd5768b1fbe187030b11b73860c12f39dfd7ae559b6f099465e3f9fe21c9ccce769402cf562","ssdeep":"1536:cMgJpTLK6A4vWFU+hI6bylqOoYt2pK3uQMWcykFBmSBtk:YTA4EUOIHlqGt2suQoL1Bq","tlshash":"40430284984428006777dd6fe0a25d598c84ff92b70a76de4cda59ba89b4c310ff2e53","first_seen":"2026-06-06T03:00:25.458402Z","last_seen":"2026-06-06T03:00:25.495653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/currency/BRL.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/currency/BRL.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16562\r\naccept-ranges: bytes\r\netag: \"fcd0bb6932872e248e0cc6603e2ee36c\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:01 GMT\r\nserver: cloudflare\r\ncf-polished: ok, orig_size=26468\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=el3q5Q1nAtBRdTxZ67vASsHqJqhTa7xq%2FWNtjXm3SWkaZk9lnfmLea14PI8gI%2BFwNg6AAIsWLiHfGV3DO3vrbfozmU%2BQ%2FnhypL%2FXQ1kV6IkKUyWbiRDZng7Zdz4EAfylaJUFFN%2FSXOGm\"}]}\r\nage: 1352\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429267b3156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16562,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f658f8045ff39ae757451b446f209972","sha1":"37a983c03b61784b820777ea123518669762df06","sha256":"1df3e8103db950ce79ed1ef35a5e88410c6aafc9cf8beddb009016f483359236","sha512":"8c155d38b24fb54d3954ad47491efacc644b00e3ce1c460917338321c4f2f4d69b105b926c59183c42a365cd459a0119ab24bc0ca6e21b971332e270d2040cda","ssdeep":"384:iMcS9r2ODURSPxOpA1GbFmQZs9BCYQQp7:9cS9rvDU0xOeaZF3u7","tlshash":"f972e15dd35239395dc136b2e885d1b62f05c4d84e1ee8fc59e0202b2b45db5a6b30b7","first_seen":"2026-06-06T03:00:25.460325Z","last_seen":"2026-08-10T03:45:16.375554Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/fonts/element-icons.ff18efd1.woff","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /static/fonts/element-icons.ff18efd1.woff HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/static/css/chunk-common.88c26159.css\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wUk3yVuUHHXZeT1ESznhuf%2BYbcgOxPTKlpSWbbWRbncP3r6111dGlFW26sx1Fy4EmBFJeCfPqpDX9GP44PxRJ87uPKLe6vBzX4AqK48gXXz28En8PnAMK362koXcN%2BTRMt8I2hSEipJ8iAD2\"}]}\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: font/woff\r\npriority: u=4,i=?0\r\ncf-ray: a07429271c4eb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4b-6e28\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:47 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-length: 28200\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-08-15T00:51:58.519054Z","times_seen":29465,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_1.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_1.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=78719\r\ncf-ray: a074292d6ca9b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 150\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1337f\"\r\nexpires: Mon, 06 Jul 2026 02:56:53 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQVNLPvr8i3Q66EFujXIEWOFzjPk1fhO08QKG4FI7CiwG7MRyk7Hpai3BsRNjb28LFX4mdCjjvJ7pubCGSLToG%2BHrZJ4CtYJ%2B7if6flNdM5ev5BCxt3Le8CRWBoZVXCsh3Yc1dgvXCWyy6mw\"}]}\r\ncontent-length: 68986\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68986,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d38eaf83574d5d82852b0a782ff4860e","sha1":"7308772dad3ed1d07cf036f1de6c395388bf363c","sha256":"f6c136a7d3ed13bd9b052a2aedcc32260a267ee114447514b55d3414719adbcc","sha512":"5269cb7271e787782a60eb5b4bec235b465220380394d872cd5718f473372c41e34a590a3bc4d9dad19e008f0c0591626fc73e80fad9730a64bb4fb6f25545fa","ssdeep":"1536:bMJEQZfuzvU9AQaPw5L/UUV6ZuHG30lCsFxdzxwJSpf2:QJEQZfurUIw5LMoVVFxdVwkf2","tlshash":"f4630271c814e2b2b174099f6f0ab1754b2b6bed5925483af00f517aea6634feb4cc70","first_seen":"2026-06-06T03:00:25.400937Z","last_seen":"2026-06-06T03:00:25.462572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_19.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_19.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1911\r\ncf-ray: a074292e7cc6b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-777\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8QF4NTie%2Ft8GWW1S6zSRYSHG%2B40flkX9gZDTe8CXs0rIqhVUPcVY7pdVo8lH8SQ02FA9VW496VsopmtUl32%2F6EK5Nmi53XcG9xZr%2BZBcWdQsKoEx38cf7HujrdmgOjE825nYuMTAEPo2UMqR\"}]}\r\ncontent-length: 1650\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1650,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9cb92bdf6b9ec470a4d8134ce8f191c5","sha1":"15a88362214ab7ed250c18ad5d4ba361f90df8ac","sha256":"ab97f3814f46b63b56fb64c4c8ffa8f83b7b633658aafe027d791d9dd354c7a1","sha512":"996902f0712431ebeaf5508e5f88879406a55d352af0da877693e793a650617f24e54e681df143f32b89e07e290f924031ae82691bac9a44d52edb62dd951d9f","ssdeep":"","tlshash":"f331c86994f722c7a7ae972f510a43ac4023d439d0bfaa41c0324fb8f458144f19e496","first_seen":"2026-04-22T21:52:39.630294Z","last_seen":"2026-06-06T03:00:25.463479Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_13.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_13.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=67431\r\ncf-ray: a074292fece9b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10767\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SFH7nW1xgnqSsgKEwXSOmZ6ISmAUwB2r1Uh4rhJl%2BoLBnYisTP0gr02Ns1uvXduGZJ4IKDAuQwyCv4AzyUVi1bvhTqOIimodI9j4Em6HQ%2BXCc6yPQaCuLJR2GYKjlAPtzfWCw0Z9lcS%2BBCB4\"}]}\r\ncontent-length: 58368\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58368,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"592c362d0787b0bf4bc3379f09fdac9d","sha1":"c06a877eaf9b9b5adcb249196032418fc1e623f6","sha256":"8a79133fb4d5e4b0a686bf9e47c477a36466b31d8dbed89740f089be6448959b","sha512":"a3c91101a2440f83af69052164fb65ec3c47dd344b8875d81471e911e35f2d32ea1a6dc4500057a86b9f4a9cb3d08809febedbbe4c208d3e787a351ec2dd8110","ssdeep":"1536:Oid3woXQe+0ComdsMnttC1BlP8TWe1TRrweOS2oC8LifrLlQ1m9x:dyCZ+0CR7C1BlPexuS2oC8mtL","tlshash":"3343f286b961a7f14ffda307ed710bc8ce2d924288719e66e7e601eb02bd9150f181f5","first_seen":"2026-06-06T03:00:25.073304Z","last_seen":"2026-06-06T03:00:25.464144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_0.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_0.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=80368\r\ncf-ray: a074292feceab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-139f0\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5FANSbtWm2yLpCpbhZnxG2P66kmZHp91pH6sSGLV0vjGukeU5uFcZ%2BZd%2FJZ8hp739gVEsQRoapd5bHEp4b0EFQAVzuEsm5j9PuywzOcGalLDDwQxsQ0DVyNo77GqjE0hLzhwcJyf37L5yegT\"}]}\r\ncontent-length: 70506\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70506,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"434f93b73427c8161d3d041fff4a71e7","sha1":"25a45a356ceb3334a16e80b421061de1ef8737cd","sha256":"f75af23f39f31e13ab431bb3b5a7360ac9309d08b6f303176f2f5977492cbc0c","sha512":"b5965ad52136caa34ef2d7d7b0e1d8d102fb8eceab90bbcdc8827e9982ee3ab9b985859adc5e629b236656235c2a68a511ee2c11860c93a1fea57ffa8d9bf89e","ssdeep":"1536:eOSWPdidBI8Yw4Qb4zHP4X3U6s4LPJ6NYqCX56o8:3sbI+4t63U4zJ6N3CXsx","tlshash":"e16302907558ae891333bc826b907bbc4c26d0d241183b5760bcbd7d7a1b68cd5bfab0","first_seen":"2026-06-06T03:00:25.304185Z","last_seen":"2026-06-06T03:00:25.465492Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_2.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_2.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=76820\r\ncf-ray: a074292feceeb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12c14\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NMqOmGwovPOX1E%2FrUKcbe42%2B4ITSg%2FyU7g70KAO2XXLclxF0wFehCQFqZKvtYBPBhNCMY%2BYiaJJwIKq%2FeXKoryz9BzS6ErZBZlGL%2FGHnJ2vfP9EkHQ6qfmrzk6ICTsdqE07RajdfMQO24t12\"}]}\r\ncontent-length: 66704\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66704,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3690ee856f2e519b0c23486f95d725af","sha1":"883951133c27893a59fefac46dda057e2effd0bc","sha256":"047fa9643c87540ae07d4896b12bc40804a154b93e788c61b1e4c3e9678f7167","sha512":"81ef00b74389e796d6345f5b86682be6b4c3ab19c621818f93bf4a3e36b6837aced75a204fb193a58f3e7c7b3ddba5fafc33d545e3e81b6ef5af0a218ee97828","ssdeep":"1536:z7RJw+8lBs8EoJlPkLI8NuD6ttUpTRVEAR8CX/+Dzb337:z1Jw+YJSPtC+7vHj7","tlshash":"ad530245872ed96bd21b2bee816c0613d6d1e312741c98a27ddc6a448ceb0ecae30fd5","first_seen":"2026-06-06T03:00:25.460033Z","last_seen":"2026-06-06T03:00:25.466724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_13.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_13.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=16116\r\ncf-ray: a07429317d20b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-3ef4\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Spibl48EK4BpOoO49OeTG1OKF52v1FUvgCK%2FUMEJm9tPHPBpMO4GVvKTuu36NIPPD%2BlwTnJM0jvjeJ8gVHHEV0BnL%2BGu%2B1Z6%2FO643%2B9ooGXg4pOHDfDsZu18G1n3FkSDawGvhztzCtdlbQ%2FS\"}]}\r\ncontent-length: 13270\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13270,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebb28a882cfe82bcdacf05f437fa3c50","sha1":"9ac68e006f3782f642adca3b46bb650abb682777","sha256":"d7cd080d375033e24cb8ab87f336d1e1b4f891dfaabc9db219ce3ec2b3b625cb","sha512":"ecdfaf4573e9bca484d0fa083608d6d5fe7a1de293cb404c6277298e99e4d46dc1bb3a198bdd75b8bd59923305b2c10f84b0a1f2949f9a43b008f7798beb8d19","ssdeep":"384:f/Gkj9t3SmsHXzta7gIwe4iUG6IOrhXABxZrwVpNdp1mmmu:9jvSmsHXg7qe4ib6DrRABMPTmmmu","tlshash":"8252c07eb1b228c491bc9b55c287e63e94fcb3e106eb6de8760975947d0119ac1c09b3","first_seen":"2026-06-06T03:00:25.208191Z","last_seen":"2026-06-06T03:00:25.468245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_12.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_12.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=67717\r\ncf-ray: a07429320d25b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 145\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10885\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xV88az4nhD0crn4c2YyrvBSoot1F17H%2B52M68NZ3gi5TPsnJkJ0MLt9yY3pPfbNNV4cUhRSVB3x5wAEqYOy%2BV4SKVOed%2F0cAnFALz4aazyksjZNmegWmVdJ%2FrNd5SN7QqAEdODpfjQSY2cLT\"}]}\r\ncontent-length: 58822\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58822,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50597c32d3d5eebc9dce5e802c850485","sha1":"5dbd4eca42db914e8ad16ae8f7b1875b5a9bc6a4","sha256":"62dc3f86cc1495d21296994d94a85f1907aa616a45c919b12b0683a556e6ff0c","sha512":"f03405b984b7e1e0b44c5546cab02955ee9f4380599e32dda71da9a5cca785e3dcf37ea5d61d655c5ebab209c18fa39f7614796fa1a52a9f011a0978656b5912","ssdeep":"1536:6NTt6vb3pnIf7CQq4xBQtq8cQLBdgULiPynmL20vCjP:2mpIf73q4xlrQLBqJPJLFvCjP","tlshash":"fe43022550bf0f0df9b8704865c7b589baa3c594716e748e3cdaac6962b30cd4bd04fa","first_seen":"2026-06-06T03:00:25.129894Z","last_seen":"2026-06-06T03:00:25.46985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_27.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_27.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714765$j56$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=8492\r\ncf-ray: a07429331d39b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-212c\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2nd3SYsjQBj8lfmWwDNu86TfKcv1u6F1vSUXu%2FcWnukcbCW9nITLqrW9TMQp3YBpgYBF0FHSwpoKYArO1sE0TxdtQDJQb68mVZ7mzSYWXYmn24bgta982Nd5vICmYH55mxspIMfkq3n%2BtJX\"}]}\r\ncontent-length: 6622\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6622,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc819af7b41b13fcecc1fcb1cfaa492d","sha1":"e097ef75287bf047bdbdf0546a11e87d6bf7a100","sha256":"1c94b036ff578fda5eb3bebe35ebedf6c431729763aafc6574d44f300ef91252","sha512":"82064e3a297a4d229e549e41e601b40289e88773abd32c7e8e18f235467c985605e32953edad6cae40f0d5eb5046d7ae5b9e98d8cfe8d381d670a8eb651e118c","ssdeep":"96:F1R0Ox03nY7gmJ6LVDsX/FwwtHUru+ccFCfJBTR44YpnMUPoOntlBl/V4frlsKa6:FnRELVDcSwt0ru+B83JrCHVl6JsKJ","tlshash":"86d17cb7f180806cd9c81d576c336ba11228666fbc84a4ead39528548653e7ffd8fcb4","first_seen":"2026-06-06T03:00:25.27209Z","last_seen":"2026-06-06T03:00:25.470699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/js/2190.79342b2b.js","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:22.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /static/js/2190.79342b2b.js HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pELJ7RkSi%2B%2FvXPVl4k%2F%2FOjC72pvtWH6VD4kIXon1YcSetlxWhCuQ5VGswXaKdnMn0kxOROoiUT0XkKUrbJiufn26JFvu7iAabRqH2oj5wzshjhLtvHJ4x%2FCgNLotrxkaLlEwtzQ46zzuLxwC\"}]}\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a07429236c31b517-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\netag: W/\"6a1d3e4d-1c0e1\"\r\nexpires: Sat, 13 Jun 2026 02:59:22 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65463), with no line terminators","md5":"6493696288f809edae30fa433628f299","sha1":"851a078a7aa584cb889f0b1790f3022a239f983e","sha256":"0da3d6cb048dd76708fe2333ee41947f53c3ef218824992164534a2e90f2748e","sha512":"48b378e2edce1091aa0a59e6ebec2a42cdecde611785766f7fab021d4f7312484c698c2f431b0d99ab346e0bdaaaee477e677947c326424abb2e456c2dd021fe","ssdeep":"1536:VqYrYXQAlKa2/cbOp2Birzve4ArWNKS/DsH9L67hgvwEbvxulmJrAZakquvpA6EC:UUcbOp/F/J4AJ","tlshash":"f8b3c725d542e4bdefab8026616e3630e1252fe49411808bfb78cc99b6d1d79232f77c","first_seen":"2026-06-06T03:00:25.450612Z","last_seen":"2026-06-06T03:00:25.471713Z","times_seen":2,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/kefu.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/kefu.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3442\r\naccept-ranges: bytes\r\netag: \"0e32864ffd9e4bfddcc76ff2b2b7708e\"\r\nlast-modified: Wed, 08 Apr 2026 08:10:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xdV0NA4lueC3B%2FER9AVHlUgzQPrF%2FP9XIcdA3gzM2TphOYR3NKpQLIJWPdEh4sJk7oEBjAOawkykzwiuIzyaDXBrTwtIYSUj0q8Aex9kwlSHoDYU74fhrRNgEwofh7osp8fX1yv3gdK6\"}]}\r\nserver: cloudflare\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=6018\r\nvary: accept, accept-encoding\r\nage: 5567\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429263b0f56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3442,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a2470db8c98fc36efd03fc3f757e136c","sha1":"ee49c8e751952ab71babf1167ef81e0674de25cb","sha256":"280fff403ca4547219daf7a3727ece0789325b2cac19fff4422c3aed74237b3a","sha512":"6bac106371704e0ddd950f0907d5f3a4ed3f1c30ea2763a73ff0bc88d49bbf83faad687acb6803e8d6aa5f7ef2bcb72a65615eb5f0f4502eb390a66b31f77250","ssdeep":"","tlshash":"0e615b0a47c8c559ece7f8005a8f87b179880b82c6e269a861459ac736dc1bd24e818f","first_seen":"2026-04-22T21:52:39.742432Z","last_seen":"2026-06-06T03:00:25.431223Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/common/get_banner_config","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/common/get_banner_config HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5897\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-M6DzZehgimIghNmMBFqbY7' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a8b7e7130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oC5osojPmc%2FHITcT8tD5ZmiHbTy3rHY%2BncXvXZwicv7A1eyNsDlFEv%2FddA0Za%2BY1aNt1SMkf82eRam7ryCELeRtUxVpponBFtehJjyhlrTP0S%2BhiGK0Yn3fywhtzWUmpBM3O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a8b7e7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/Reward/ball3_2.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/Reward/ball3_2.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53794\r\naccept-ranges: bytes\r\netag: \"56b07ee30afa563979f6b32d0b2a2fd1\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:29 GMT\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=85394\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3lO8IwNmCgBdQ3NoQAFdF%2FU7YL0Y6UOfE1UKZJx%2BAIj8MPh9qDcRfFgHkb%2BjZXbkxPz7dDzO7V1U7NJxWG1hiOATJ8OMoROQ%2BieLgOpLFoJESEf%2B0G0NWe%2BgqsDiGkEsfA394zE3U5Lc\"}]}\r\nage: 3441\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a074292aacb656b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53794,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ba903dd1e4c9723ddd1b073a1f6213f","sha1":"402d3ea48222c20359ffff560188553289070d45","sha256":"ae2b5be8128a1039c52e7034d99600f262efbb5b68e91d22b68846e6b99bebd7","sha512":"4c2a763dae605876a4b20641f42112a21f40e90d82c9e82a7cceea4389cf8c348e42c5dde94a9171a7eca93aa30f41b239ec74e70e516cba8aef5ae1f98dd8fd","ssdeep":"1536:gzvkbgs3qjMmD4NfXTDBgwHG3R/hQnaRBmHN59CgF:g7pjmfTDBg/3RSWmVCu","tlshash":"0233f2417b6da9d9797030c83eba636e1342713c3fe9ddb0575341fad2a8053839da19","first_seen":"2026-06-06T03:00:25.372108Z","last_seen":"2026-08-10T03:45:15.856878Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_9.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_9.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=6597\r\ncf-ray: a074292fecedb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-19c5\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rkhymFzQX%2BzKUdKqZ9zk%2FW%2FmmLKYSlnFRKC5Abs7BCAB6BkGJMyJaaJ4Nx5u1%2FzylThBMiF25HQSmh%2BdO85kBZ9XYGMCl3mkeCfm8mdDbaTs4agtTxNFfQVVcKsdOk2RUqfB0a%2FvTOB2nmsI\"}]}\r\ncontent-length: 5558\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5558,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"46ef305b167d005b26bac109266ddac7","sha1":"7cd465a1c776b568f0397a1652d198a04d68af67","sha256":"eed086e17aebbd5f76aa60a0ce3a1bcd3e8e036fd1d63217e7e9523a958e587f","sha512":"7e497790719940fe4bffdda11613cdc1bdf6d77f54f05667feda9aeb2c36a7c006fce262c65ece0084360c122256977dd79845d9f6296baed9e5effd59927792","ssdeep":"96:vqSOU1U9YYQy3GbAU+HKhzZ88qLNyxkZOtxbNuBhVxDPcuRN6lCt:vqSOIpPhC8GNyx86uVxjXeCt","tlshash":"28b19df2d20bd5a5b0994640fa833ac4e02158768198fc81c7baf6732b3bc27285429b","first_seen":"2026-06-06T03:00:25.473356Z","last_seen":"2026-06-06T03:00:25.494914Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_7.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_7.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=69855\r\ncf-ray: a07429316d16b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-110df\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y9u7E%2FyrTOIzuQn0Sap7I7ek9GZZLnzK8Ghc3rHdZY1O3Uwd7nktT2r5KYbsowzqkss9tf5tJVT8dm4ah6RyI4iEzo97n3Yq7RhyaBD31xDUdCLsFEFHGIaKzrvWeT2dVhU5kj2BWELPVvHW\"}]}\r\ncontent-length: 60514\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4201f1981b2643941a99d50b67b0fce4","sha1":"28646a67c366f4381c784ff53c03ee6314e5a449","sha256":"fdb051be63ae369c96788cd95c9ab8dbf96c6acae2631c4b814c67e9e142a34d","sha512":"4fe57f91fb01a583632372ed530cb13442454fb1bdf06ea56f04e5fccbe0f901ae3c3f14045115909773595b86a8dd9f81fc54d420a4be545d55a6e7ddb9408f","ssdeep":"1536:ptRmVtBK6Xwqn0oY3LwpyQK5t17ywe1Sb/hIoTaw5xULrCKkHAT:pYK5+0oY7w8K6bJVaw5yLe9gT","tlshash":"0a43023a8737d5db6668d6ec2d2405d918c3ab548436f58dc733eb98c0ac189dd48bb2","first_seen":"2026-06-06T03:00:25.279322Z","last_seen":"2026-06-06T03:00:25.474947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"34.203.24.55","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:27.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 473\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":473,"data":"app_id=lth8spdw\u0026v=3\u0026g=ce7cc7ab8333ba9e81fd82a5d3d51f3b7d658d40\u0026s=2a033bb6-2b90-49ad-a6e5-6720f17d651d\u0026r=\u0026platform=web\u0026installation_type=npm-package\u0026installation_version=undefined\u0026Idempotency-Key=f3433b6a8ca9ca44\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=casloco\u0026user_active_company_id=undefined\u0026user_data=%7B%7D\u0026source=apiBoot\u0026sampling=false\u0026referer=https%3A%2F%2Fcasinogalabet.com%2F"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept-Encoding, Accept\r\nx-intercom-version: d71bf3b48862b3e271f066992bb3cffe3c29f2f8\r\naccess-control-expose-headers: x-request-id, x-runtime\r\nx-request-id: 000r4vl3ratu2r3aivg0\r\netag: W/\"5ad60df4ce1557e63a5799f92af29136\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://casinogalabet.com\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.147908\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-055bba15981b47089\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6120,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"06231dd46231b73898e0cb732de5db06","sha1":"031d31980b2c11856e3c53be36db6207b571eabc","sha256":"5ad60df4ce1557e63a5799f92af291363185546d4f62c03205f86f4b1a095b04","sha512":"a15582f2cbea3f27a64721f0ab0e93a4f7b3c2cb4de7ae60aedb7dfe6727324304df6f8c53e30673d2dcc100eca83f3a6b40f37c39ef154f71e5a80ef52da06e","ssdeep":"96:srjwV7pOaZ7WZ2QRHABNFODjzK04zMwaLjGMldlzAOURdHwhrDSM6+ZoHSLtFvx8:srjwV7p5Z7WZRgSwWSMZoHSLtY","tlshash":"58c1864c8948187f628bc299d714be060b7d81b7f2942d98f9acca2d32db2d55267307","first_seen":"2026-06-06T03:00:25.475958Z","last_seen":"2026-06-06T03:00:25.475958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":194,"dns":1,"connect":92,"send":0,"wait":258,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/invitee_reward_popup/image_bg_claim.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/invitee_reward_popup/image_bg_claim.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 120594\r\naccept-ranges: bytes\r\netag: \"b2cc099bcb806a5d62d3a636f534c2bf\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:19 GMT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 903;u=5;i)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=120594\r\nvary: accept-encoding\r\nage: 5606\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=guPOU%2Bvqp5kmmA4gHfDYIrARdr%2BSn04kH8ezwgYhQ5h2yK7bGzekP1sQtgrQaBcbf5sF3MM%2Bt8w0qPef0v5vlbPDFFlg156U9a2e3Uy35sEerAFdsqutqesmrAB9nMf70Hj0ynWGLF9C\"}]}\r\ncf-ray: a07429279b8c56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 710 x 1008, 8-bit colormap, non-interlaced","md5":"b2cc099bcb806a5d62d3a636f534c2bf","sha1":"08cf79f2e1ff2401d3acbebf1f300e120ece445f","sha256":"214db09461ec7e5f8f68d8e1b0593de3cd53f298c6e3e417adba2189aabf0b6b","sha512":"3009026aa447aeff1c29fba19eafc0b702414cf04a362d5f2094badd12caa5e93ee131ceeb344c16c2052e6787721869d3b9b6d8fdfd07ce059613b3a637fbee","ssdeep":"3072:FYU57aoWjcaFgn4w7Z/bYGDTwnw/AcvBsnhzSw9G/It4E:iOeo4hARtzY2TwwPShzSw94ItD","tlshash":"c8c3132381e91f5583d479e104d78a92c048a3acff59e8bc0619dbd1fba3ac4712d9f9","first_seen":"2026-04-22T21:52:39.548117Z","last_seen":"2026-08-10T03:45:16.357159Z","times_seen":7,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/2.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/2.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 126152\r\naccept-ranges: bytes\r\netag: \"edbe180cd8d7ee73d4e96d4b607ccc09\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:12 GMT\r\nserver: cloudflare\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=190484\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PK7TJ6RbcuGeCBoLQ7tb2VHJ7Gp1pa9CKJfWTcXzpb%2BcPndmntWSaqszTg9jQBQoDBJxGdWXd4nEGb%2FAYv3GehQDjsyWGwlSW9wV7h8OYlSktIBkqc7CdAJfQmIpY2UEDgoOXND0ZYzx\"}]}\r\nage: 5328\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742927bba656b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126152,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f7e137a2fcd5ad84721347181e71c9b","sha1":"6adae25233bd673d4db3752228fd74a6aa153b99","sha256":"814d8c3839b468266c2622428006b648a7a86d52eea0a1208e9d46b7eeb12b41","sha512":"ff17ce0154693283665253753bf841726170db8bcfde22736dfb0e8e87f64d883813a804c7784e6574e9ccf08250bbc67578f2cce90c66c6e0af1080e8fe5490","ssdeep":"3072:EIPHNzFvuvkZhr/ME+3nnhe5BRiPmWmYgdSLZD:DpFvphwEShCRiPmNSLd","tlshash":"72c31274d0cbd7982a0af93233f9db2ad5bc947e60001b680947d7d4389853c930efaa","first_seen":"2026-06-06T03:00:25.421665Z","last_seen":"2026-06-06T03:00:25.478595Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_3.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_3.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=79808\r\ncf-ray: a0742927fc58b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-137c0\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U7yGwjSgJshLsUTUuHGmB9Wfq8bdHHh80I2mTIRcqSyWTN7kRuzRzU8TuyhHsqrqb%2Bg3HfKiIULjJgN%2BWbMaNSloFTssKpVp8AUItnqZ1GuFgCjIOXIs0r89WW2AJDS0l6EEHhszIpLj2utY\"}]}\r\ncontent-length: 69548\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a498e6cb96800192205d6007d9e8c19","sha1":"84860d1a2aac8b6449a6732a09ecc64ed29ad227","sha256":"fd25d10fbdabb2a9b2753931263178fa7bcf4598d729f3e683f623d244b25ed4","sha512":"d28ba8ce64d15eb157fdb0f27bc1c05240e76b34926590ced1fee8e9195736875bbc13232dd8758ede8cf8cd5c1c0d6270a24dfab0d33331e3f53a73c3400c5d","ssdeep":"1536:EgaorMrkqV+C0Q23gS2vvJY7J13lMRcDSAsmRgzUFoBh8nYUV7Z:EgqgVCZ23gRvv291F/so+hBMYgN","tlshash":"066302e114ccdb8d5115fe59a82f1deb6e6bbc623b52eafe48ef410c00671b4181e634","first_seen":"2026-06-06T03:00:25.086313Z","last_seen":"2026-06-06T03:00:25.479342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_5.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_5.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=67880\r\ncf-ray: a074292e3cb6b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10928\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pVPfkNH5NPr18cPR6XpHpPfPiCuGCLPs%2FwGg%2BfjTI95iKQQxzot0UREc1JVQAqgX7A1d%2FkdNFM7PoHzo%2BM38EOH8XYPbOxZO8IDukbsVQfnpS2xJSmJLO%2FpmQ2Jufzbr6JqlEPi%2Foeox1TI\"}]}\r\ncontent-length: 59214\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c9288200d8fa0234740d00b5ed25771c","sha1":"3a87da0bbeee5ff4235a5f9f7678d2ba8d8d8256","sha256":"28b5d1e46ca14e7e0585ff65583c0b4ede59a901a41400a0256ece636dbba3d3","sha512":"3f69863c0555667f413ad6402703f1782a5af45b511f983fbe942210cabbba5d4070b060c39cb74b70ce5468dbc4a8516d753b836b2495f0986dcea5e78d6a18","ssdeep":"1536:FEGEx1RuMpzud2Ltoxve/x6ZQxhPiDZn+5Ik:VwRuKtoxve/x1zinRk","tlshash":"24430218e81d4290913bc497bcfbff946699e50f472632de0047349968ba4a9ff4e72c","first_seen":"2026-06-06T03:00:25.392949Z","last_seen":"2026-06-06T03:00:25.480174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_15.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_15.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=16570\r\ncf-ray: a07429318d22b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-40ba\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oz8XWva3kM%2BAtu9xGWS375ZlCeUy9hE3l%2Bl6UZleEpb%2FAAQtctr8r3aZamacp%2FNLbvnLJhu22BBWrUrN8GG3Ial5GKza1c9oDR94XoF43ygG44sQK5gO4alM1h7QjwZFRbDj1PgYX4SWMxAF\"}]}\r\ncontent-length: 13712\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c1befa08e874a360e97b7cf50872665","sha1":"69a0c6e407de2a69ca8a45816401393ec40cbf86","sha256":"564d685ff4e105218d46c28c415507b9a73b38d3ebcd67fdaa237d323834e8b9","sha512":"3e3240df90854b7ce344958bcd54628fb8b45aaf1ed5dbf884ec76d3738260c6dce21876f4b2bc710b24afd14b671288ea99f3a90bd9baa07f17e42872e5355c","ssdeep":"192:fbl7HnhHae2HbjGHeEkMlhOLI85zJcektrF0s8mpaNIh6xsBzlOC1HmdL1rdBEAr:TFYgOLI85zaf2s8msehgsBzoykdBB2BQ","tlshash":"3652c044b87b313259f1e477dbd067a194a900ae430dd826a848aff33a3d5dda1cca71","first_seen":"2026-06-06T03:00:25.462266Z","last_seen":"2026-06-06T03:00:25.480942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.9f13b9b9.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:26.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /frame.9f13b9b9.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 257519\r\nlast-modified: Fri, 05 Jun 2026 16:42:56 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: 2pVMfb4_Ss9QkaE62BD10b6.ys68OEsB\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 02:45:13 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"d10ec87ff41b8372af169b03499fa8d1\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: dyo32KTNlZGJ5LUqnj1XCA4jjjm4nPXZ7sQWR3vOm1DPCu5LR7Akuw==\r\nage: 853\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1209928,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"07c9700c8abcfd55f7de33d9abaceab3","sha1":"3b23a7532bd0ea534cf9e31d3fe401ad524d254f","sha256":"f834c0030e99c6e8b4e8f2ac78edde9107d9726dbf6c2d39d7b6db19a2be44c8","sha512":"177db587e2c0c75b99c298efad283c5dd2b3dee46689a80914487510b5ba49fdb5b3a996df78c78f455fba349f1199a1d6ce9d5864262d65c19e752aa00d1b5a","ssdeep":"6144:ZgrdxM8KqvmG7PsmnPJQG4Pjs+8J4UCu3VAKoYEalcU1s/Lss4Dqxy8GcHhLZw8A:P6mGbsmeZP8bdPRdmoKD5oFoySuD","tlshash":"0225c6ccb2d6f06a43976535812f200bf33e6959b45e8050f629d8d1bcb958ea237f78","first_seen":"2026-06-05T16:52:44.941393Z","last_seen":"2026-06-08T08:04:32.277536Z","times_seen":580,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":13,"dns":0,"connect":1,"send":0,"wait":2,"receive":11,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/app_down/gift.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/app_down/gift.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4882\r\naccept-ranges: bytes\r\netag: \"85a01fd12fbd230fed96186d796b23b2\"\r\nlast-modified: Thu, 04 Dec 2025 09:11:52 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQ5VnmMNaPn8dbC%2Bo%2BpOiFj8y1pbRFZdJgk%2FiF0flcxVlFZUVVp9Ma9vQgz3SehRsF4llx55su9A7%2B76lHxGS5huMbcdcdncLYWFRdcqj0a7I8lragMVV8%2Bxhkyp5mwX22bdr8OXyDWj\"}]}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=7294\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 1729\r\ncache-control: max-age=14400\r\ncf-ray: a07429262b0a56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4882,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"98209122109491e37362e0b456c0df34","sha1":"5d12b2b9c230364d5237b14efd8819d10834c3ed","sha256":"13b4758139f3cf246901bb5563cdab73681f8b94e2d34d8589457b93c07d3f16","sha512":"1330bff0bf2e2cc28c221f97e33be90b7e27443a9d5078d8b84cecfeddc69257d7e86bf981535d247287e2a27781c5ee809dea287ea97b0b808ec5a42cd6f794","ssdeep":"96:+bj0/F+hJAaSWcZWZh5Eutm6uQQcdgqVDyOKwApx45NODX57D:+PRtSpZWZXmZwgof4+ODX57D","tlshash":"68a19e2b44b931599b807c78db681f02084f776ca099830233deb1b01472d3a7cab5ef","first_seen":"2026-04-22T21:52:39.978673Z","last_seen":"2026-06-06T03:00:25.482693Z","times_seen":6,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/common/media/whatsapp.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/common/media/whatsapp.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6470\r\naccept-ranges: bytes\r\netag: \"56e137c56feb26e843e0044a530fba24\"\r\nlast-modified: Thu, 13 Nov 2025 04:17:31 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(118;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=12204\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4FHTlttfUYlVg5jPNmHmjgYwRnHOMtJeHvtLnEvammzNgtcnsEDLRBcspCfAY4q4nHiX3Tqi3SRGXN5yPmHNdKvS08zN48xOBMtaRw6gslBZ32luFmyCkhVqqCFCcY7VeIswoGgpiA5\"}]}\r\nage: 5363\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429265b1f56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6470,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"30f8560e3e2e6a78d6655ec50ad97b94","sha1":"ceea6e64d85d4f7c61b8d0910261caed2fc0b046","sha256":"423013854f19a2cfe30e6cd1cfa61312c38491cb1b982667b79ea3e9e76c13cf","sha512":"9d2896ceee8dab3907017c41c941f8f14155de401df6a4cb6bfb9b8c5ec17a9796e0c63c19dc63e229d6ab68e827d32a18ead67b246d88c694fdda8d10d94211","ssdeep":"192:kgs2niq5Lq+QNUjYZtRL0g+U2OkONTjdzvt:Ds2ni8Lw4YZbL0g+3Gxvt","tlshash":"2bd1bf1fb9070ba5c257b326f833d82b48a6bfa436ba15d396e080860b275237c60641","first_seen":"2026-04-22T21:52:39.908677Z","last_seen":"2026-08-10T03:45:15.851018Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_1.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_1.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=75006\r\ncf-ray: a0742927ec56b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-124fe\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pB3cS5L80M0M3tNb%2Bla4pRTAymOmpayqv7xoFDcAR9LQscgtAHmcnMvQJD16%2FEGLHScfAuIy4TLCsk2Eyf0Q82tqsFkk9nbi6Yk5bP4Zh8eeWil9THn56RSW36m%2B5pk5PK5sbPKp3upJye%2F\"}]}\r\ncontent-length: 65100\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1597ac1ebeb7eda27b5a6ec784ef4c21","sha1":"45017114f2f8bde94571bac11743345d5b7fb978","sha256":"f2253b06150914517e9ec23ae973a96ddcafb3a7bd215cc96806066bb749581b","sha512":"d7eabc51d26ff4dc10a3ee993e43ca464993aa2a18ad72e75d85b162a7bc6896a8e34bee147830cf2ad5a1680d55d2b99fa8ae9890054be31dcb93e94f9d2bf7","ssdeep":"1536:B5gOikdjOyuagaknGZD1iimLumzTQRBanSEckaC8Bsqb:WNak41Hr2URByoC8Bzb","tlshash":"095312fe537a5b31fd80686c3b8c0d6903620c10561a45da950dbf9cc9ea4839ebeb5f","first_seen":"2026-06-06T03:00:25.483965Z","last_seen":"2026-06-06T03:00:25.532957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_6.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_6.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=78411\r\ncf-ray: a0742927fc5ab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1324b\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1RxOvMfETWlRjXB7faay9EEqc6gXBp9BQUljMf673FIHFoIaLP%2FSmWuztv85kYUIr%2BeGzXhuKSsel4krjflNAZ%2F7ZkHXmt%2B%2Btocl8bG7XIpbYvC8kKgSxCcVBGaa8vmDB5jbFr%2F6ym3EtLG\"}]}\r\ncontent-length: 67986\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67986,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a974e1c68c074b1074cbcc0adb0a740e","sha1":"d0ea81119826a7d81b4161a0ab215fe99c272d8b","sha256":"592c4fc012b7306c6f6f3c5b0cbdbe4f5961a0a9d505d97411b6aa7b3e210898","sha512":"baa07a67487542b6f80e8ebed6f5a0b9d911ed184521f56a24d4e12180e9f450f38dcf9ec7feaafdb186aaa1effed2f6a3681c022793e747ec42f59407a3afa4","ssdeep":"1536:TLit7KeBYY1cysvddq3ezmi+LR/su6KIVrP2W93RX7:+7Zu+Qvdvm/EhP2U3RL","tlshash":"7e630214a082ee4228971cf96f5cf68e01bd4fb28a2471c64eb517dce2368e5354be97","first_seen":"2026-06-06T03:00:25.311347Z","last_seen":"2026-06-06T03:00:25.485501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_7.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_7.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=6243\r\ncf-ray: a07429280c65b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1863\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rumC9cGIvFjGzJF6zhGBDG68ukzR5wyx7IHm58V3jXWv4PwtkBPiExDMsWbCJAm6Ing9uBdklS5RWgla%2Fpsv5EPV1nSt7KZOZCNkUuFxNvcUX%2BX9kSvOEbgOM9tjzm4qw0pL01fPm3vypprf\"}]}\r\ncontent-length: 5410\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"23bba4788fff63b8b985ddf7b5c216f9","sha1":"7da94b6a2621f1cc66d4fea6a654424774d9710e","sha256":"d39a516c7b8f21737f10ba44b7cb0d8794bf3a47693f5fb73e6bc41235bad949","sha512":"0a26bc81c64314a99a9785e350f67313dbab0f6764e4f5309b059393d9ddf629fb0be03288be8a078185c2ca9e9d07e31ab53a884fef79c3fa9a5c277a461da9","ssdeep":"96:Jd8AmYY3MyLaWK1FshD1P1pa6t6qMEuE1EYp+3v8/gSVFTPa9kZ9xaI3sJc2kGJ0:D8A7Y3MyL481WmgOEYKkoSXyinN3suB1","tlshash":"c4b18eea0f216a4a4ac35643e1283b8ecd87c5dcfd15b69f696313194ab608872e704b","first_seen":"2026-04-22T21:52:39.627464Z","last_seen":"2026-06-06T03:00:25.4863Z","times_seen":6,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_31.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_31.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714765$j56$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=4678\r\ncf-ray: a07429331d3db517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1246\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5DZKe1Oa%2FM0VHmN6SeKlzbtzGqk4yvRGLRAsXGT6p3JoqQOQDsY5zYTIg2RQajPfyRhwTZ5sqQnqaT0Hs6fMEk1JVsF7PYwDWJWi0CIoDG9T1fppUib%2BEWtNdscWCSKRW6o1vXXGGdLLbtA4\"}]}\r\ncontent-length: 3440\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3440,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c93900804232289f97cdcb4d7086621","sha1":"a54d066212b6817a2900616b9027dccd5f153d6e","sha256":"dc891ddb1340c9d42e31ab8811883757bb5ee406b9285bb282124ea2242f5d71","sha512":"4df59e0bd3dde2eda4b259f897a399249fb620a87c9f468eb84024133a5db82cdabfa722d1de2a9a24413a81574a8b8f2350de9568bfba7c4c203a2b5112daf0","ssdeep":"","tlshash":"27616e0ac3c2c5411afcea0ebafbc330ddb419550db427317809e26f155a3554c72974","first_seen":"2026-06-06T03:00:25.273233Z","last_seen":"2026-06-06T03:00:25.486966Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/common/lang/es.svg?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/common/lang/es.svg?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mTLDPC6xej2aiw%2FQiyibUkVxUJumLVGtkTyp3jX7%2FS8VXVK0w2OKqcos9otEluOOrOB7rs5bXQcXX%2Fbj3jVXug1G8rczJJgUZ6EjoI3ynMFeaerU17Ev6%2Bg8NtfZ%2Fdhtlq9ZIvIOFtBJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 02 Jul 2025 10:39:59 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nage: 4994\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"d10f5e4b1438708d3077e570febf1795\"\r\ncontent-encoding: br\r\ncf-ray: a07429263b1156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226809,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"278bc17621a939723e4538b54c9bd871","sha1":"dba723517f25c96a1faf609d54e8f455d359e151","sha256":"cba65492e9f17825e0165e53a773d4d767fc586e19de0fcd1cc70f1d75ad7a61","sha512":"788f57d7836836a87ac0ff0a0e78a423a4f6770f28d93a16cf6300b71f259b01f7372b4920c42a044c1eabc484120dc2913c559ee7f1e255494919889dacfe71","ssdeep":"1536:mnh8wlu4mtyW2DGDnyKJowSHypgnMZkD+IaS:mWnnbU","tlshash":"542437170306a79bbb4e5294eaa9008a79e0d8d7d5b1e1d0fb572013e08d8e97c9c7fd","first_seen":"2026-04-22T21:52:39.838345Z","last_seen":"2026-08-10T03:45:16.348772Z","times_seen":7,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/home/nav_bottom2/3_ac.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/home/nav_bottom2/3_ac.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1790\r\naccept-ranges: bytes\r\netag: \"63ac357054c5a0a0c0ee2aa603eacc2d\"\r\nlast-modified: Thu, 09 Apr 2026 08:52:15 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oEYA%2Ble2F3rpHEBcle1VKctrkBbAweJd2oyTR6NHEGOeJ5ss2tNBbUR%2Fxe37p3PvzDt0S1okBsslUp2vZlUaoXuY09I3mb0xWYpqV4lCxPqHUqjAAuAtO1nsrf5I93E2Aa9Ctlcfmw8k\"}]}\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=4274\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4428\r\ncache-control: max-age=14400\r\ncf-ray: a07429266b2b56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1790,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"00a1434ff7aba60b15824f6ebb939c15","sha1":"793d6aad46eaab4a6a42894a9c1499b46656122c","sha256":"6cda23450a82cd7c80e5eb56c05c19c8222a60473b1d3d5fe9293f81d5d68caa","sha512":"6644b62c29922e3e20ad668fef0f7f80b1bef4c233c98433ee3a62ba33ca55d3aed5ed89703c16f2cb01975493a24205646ea2c9526a504079fd29e6cabd3844","ssdeep":"","tlshash":"85310976247f448d293d62d637d1dae0819688c614fa4ba4ea4418cbd331db2a83063a","first_seen":"2026-04-22T21:52:39.61559Z","last_seen":"2026-06-06T03:00:25.488777Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/wish_wool/chest_close1.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/wish_wool/chest_close1.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 121822\r\naccept-ranges: bytes\r\netag: \"1fed5b7c2762ffa56e9c8b256d1fa5bd\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:51 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tx8ssPimekzwSowhrKl0t2D55pCRIQJtlsExZgR7iAshMsvK4xrCooEY6gtS4T7Te00KdkZRdv1CgPflSlnTNYCU8%2B5YvnkLqn62LYgH63cixyosFtKDAcRibqGBsmX9SeDdOJ2B%2Fmvp\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i)\r\ncf-polished: ok, orig_size=174376\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4786\r\ncache-control: max-age=14400\r\ncf-ray: a07429277b8256b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121822,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a1648d79eab4f721ba3c4f6bd1a4dea","sha1":"1f49fe1e1d46125eb209198c5076e3fe5f8145ec","sha256":"84e77b7b44629681a249206c02a8ff6a70ef4fffcdefb071c42063f522dc801f","sha512":"3858c3443f5478eb4f25eb87d1404c6e9cb3e939353c73179ce2ad1303e3898b9687ceb7e87e5cf4878c3f027b6c1bfe71bd2eaec7d4c4798aa029c3ed15d0af","ssdeep":"3072:bq6/VjGuj8xXqUHOoQii3ragcq77GuwZ089GXXftc8l:bq6/VjHj8xXq3iMuhqP0ZD98Fxl","tlshash":"e5c312cb2824019a284017af5a77bedb7f87add3206c066b141e8e1797d7ed0157e2a4","first_seen":"2026-04-22T21:52:39.808266Z","last_seen":"2026-06-06T03:00:25.48949Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_2.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_2.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=80216\r\ncf-ray: a0742927ec54b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-13958\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IhjbFW0ElprW17ihbJhs09GikybIimE28Kp%2BAt55cf5cdmuar%2FJkM7sMBV34W3KUVRSm7CVV2E4lRIMGGeX%2FbX%2FAxQvA3zUiVUDKb0A7y5IfOJbdif0jILWsKD98AnWTISvGvFamTZvHdMqQ\"}]}\r\ncontent-length: 69932\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69932,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5d992c550f5c49daeba860578d22023","sha1":"66e439f775acd062b7cfb752e8ecac97642dac1a","sha256":"716f0b5a288da194f06dfa887bd4b8ea3591c124a7b2526c71f466f7db56a158","sha512":"c6cb844acf01b78ca4ce198adfe8d2962035761d0770efe21a676aa6a32750423c9ce0dcff3ef532b5c682932f07454aa3569478df7510702a6f96c94a15c508","ssdeep":"1536:iON0iDZ+3x5zHZeGq6WVMBA47y7z0LUudq9wV3ftk9Gy:FD0Hz5eG1WOBA4O7SUudukI","tlshash":"3c63025efe44341c81d6f8bddbb107089bb474d4e02eb08a56e099bba59882b45ed9cc","first_seen":"2026-06-06T03:00:25.466264Z","last_seen":"2026-06-06T03:00:25.490308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_6.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_6.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1760\r\ncf-ray: a074292d6cadb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 152\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-6e0\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TAqYiN0n9vqlH8C2DS0CYb%2FBMcfKWkgukIuC8A0dmBlp5XzmrIX%2Brczve0PAT5h37x6X9KEhPoMocc3weWu8GP2shrQrPHpRgAd840sZQvbSA2heQeaZBi1ZjUaPT4m4L7%2FGdGSlMD5MIwFD\"}]}\r\ncontent-length: 1522\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d3c08f2a2c91fa19ed9f09aaf07d5dc0","sha1":"758d9a9816d05ba32886a4b5c9c2f8407417aa1a","sha256":"f70c993ffdf388df3bad6e7baa3ea7e3bbd9da3da7efce9a0cc1f3170b3f2939","sha512":"b0c57453aa498f29caed8353e67a9935f9c4f2d59b21c11aa779199e1f6c41b74f66a06c72f106df686b287bf76c06da3f6ccbb721ce62500bea4c52f9af2c54","ssdeep":"","tlshash":"34314924b5af0c10b5b74c401d2f7d885b1c913f9f440ea6e392a75ef64518bb028f8e","first_seen":"2026-04-22T21:52:39.743684Z","last_seen":"2026-06-06T03:00:25.55974Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_6.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_6.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=69119\r\ncf-ray: a074292e3cb7b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10dff\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZB1vkTFShQvkC1jecD%2FBdyOg%2F%2BKQnHUkLppUs%2BRS3avqm5B61lKBtLBgujAotJuGNFNrC%2Fv0c4Wc2ODF83kgNjAbK9CLHOKIVbnW3TrLl8s2GS74Vvoj%2Bg89zvzZ2q%2BTDB4P0UgIJPsXrv9Q\"}]}\r\ncontent-length: 60444\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"979ca1636c9d3d4406d9ca7aa2c0ac9b","sha1":"bae7b59c5b7127af4fe19988cbc8da32635e1100","sha256":"5816372815d1c6e83ffe03d96bfbb8e59ce27320989d93441f97de585ba4bb89","sha512":"e61a0ed27a63417cdd36ab507b5ad873ea7dc968109e760eff33fa006ad22ed7fc668cc0df5db58c6e4e9ebdd035c4a9f7b60ba60f8ad2e842bd072601725a75","ssdeep":"1536:viqyg0vMfjqP08S9Bii6i83cAYtuGOJf014XpTPsjnd3:vIvMfjGgPi/3qUfzXpTU","tlshash":"5943018c3d05d73d3587bd0a28bb6e1096e220daddd6218804cfc92ea57f0e864abf50","first_seen":"2026-06-06T03:00:25.484333Z","last_seen":"2026-06-06T03:00:25.493689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/galabetConfig.js?time=1780021684393","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:20.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /galabetConfig.js?time=1780021684393 HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfMIDZ86CPpat4Aa4pJNsBBn6TY6CqLJmakTY0MFqNEDqbLZVEBqkm%2Bvyyb%2F4VG1QVeuG9Y4xsRZbOHL69Ut6GhhnJ9mfnOVMlS5PQad1zpoJ2ZDmNNPIq%2FIKQV1VcTvZW5NZsF1je8XrLPA\"}]}\r\ndate: Sat, 06 Jun 2026 02:59:20 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a07429171bc6b517-OSL\r\ncf-cache-status: HIT\r\nage: 154\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\netag: W/\"6a1d3e8e-bc9\"\r\nexpires: Sat, 13 Jun 2026 02:56:45 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:10:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3017,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"84f7e1647d2dc24b8cf4c4c96e6b247d","sha1":"0b2a4dcca7183066b23b95211a187632ba0b0995","sha256":"16c556f1537d6e9588cd29f553357ffb64a90dd60ffe184c5d82c6ae089239c2","sha512":"dc4abdb9c35fb189a86e619af88f911284c7933c8c76d2476eaf3faa1b61aaecb3531172462e6ecc157257b72307a04ec7f93615b03a3345eb239e3e860d3b18","ssdeep":"","tlshash":"fc5176eac146063c17a402cb24debec67f83d6645cacc8a4e64a5e4cf94b533b097b4c","first_seen":"2026-05-07T15:36:00.983597Z","last_seen":"2026-06-06T03:00:25.494556Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:22.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMGIw56c1e2HHlFkKSkVgzgK0kuTdZuel399tfMB0MBuIEJZ6Bu1R2qoELtDlBxsToBV7V1KtDfaszSLLPFPagP5Ntnky25aRTJzy%2FxOgJ2a6mp0dNAWM9WDogaT79N%2Bh8t%2F%2BdMDPGSmCxVk\"}]}\r\npriority: u=3,i=?0\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncf-ray: a07429221c24b517-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, private\r\nexpires: Sat, 06 Jun 2026 02:59:21 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6763,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2972)","md5":"33f524534905f04c5e675c5d3ec5b4e0","sha1":"995fe550411c4678fb434dfb341944bbd910acb9","sha256":"34511a8aabd2c456a4af1b587fed0752cfc200f46f4a054c289651b3afaf2d83","sha512":"ee67094a904728eaea03fabf67d740725a5e64829501a90a3bcb27d0f532d1b0323a9eaf8dae6495841d159a092609f6e5ffa2317fb673e8518529b4c1d668ff","ssdeep":"192:SVLm+oVyUL4AAQ2ENNJOCZOPJD6n3OBYpDHBDqB5:SVLm+oVy84AAQ2EsCZ0JD63OBYs","tlshash":"f8d1b961e70f80088362dd51388bb69f7d3d01258d758e76edb43a7c4ada6b5436fb20","first_seen":"2026-06-06T03:00:25.49527Z","last_seen":"2026-06-06T03:00:25.49527Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/ball2.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/ball2.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66754\r\naccept-ranges: bytes\r\netag: \"4c875b272b90d6e07bcfec50941ea490\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:12 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i)\r\ncf-polished: ok, orig_size=99328\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TwCIpgQeRvHMhipMpdvetiv66wy0LaZLjBA2drdA0S2%2B%2FjK6X%2FNolZmEpj4k7o32FE6xTZ0KS5Gpci%2FJroL%2BogFkIqf1bASvn5tWdaUuCR%2BjsmZMtErIxv8H1PbXwi%2ByKgeZsUU9gE6c\"}]}\r\nage: 1899\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742927cbb056b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fad30b7e0b0fdc50ce703c5df6212d2f","sha1":"b6155f66d05354afa57f3e837ccbd0de6e44311a","sha256":"568e231075d56ce9b8777c56f8d63b173487d1892ec0977f6c2186ff1efe888f","sha512":"95180a63d7b013667a54ae51ffb9e70e8a5570733afa21f6ff618587594d6b3c9f33e8e6eda1628159bf032d9ae74ea19a15ab38e8348b10ec3475886cc59ded","ssdeep":"1536:a9kyP0GxTrNIWlZkP/rr8KpJGCqwXO7aktuoGzx6j:2kehxTrNIYCLrTpJIjtrGF+","tlshash":"c16312792330df141ed553acc03bde6a87ae66d4f001ad90eb9d5f188cdee89d4c8991","first_seen":"2026-06-06T03:00:25.066501Z","last_seen":"2026-08-10T03:45:15.655307Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/ball4.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/ball4.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 69312\r\naccept-ranges: bytes\r\netag: \"af87ea7b71b6ab19eac48f19b85ff6c6\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:12 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=99126\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCHrs1mLuntCMiqqk4%2FDcoEheDwYsbP08fQavTkdG%2FoQArzz6LBaMqar6MqRgDzbs5pHpZlH%2BqlRpMUe96uHOsxuEQNQLAD1GD9caYFHwGuXeeNuF2NoIppUWjsFY6qtqs6A7Cjczgmq\"}]}\r\nage: 3244\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742927dbb256b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69312,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bdfa8e1ad896224213ce9052ce255ece","sha1":"0e45289afa44f708fb114db415ea72acf959b82c","sha256":"893bec8b34fcb5ffc7ffe2817bd1348f02d341240ae806793954263907c7e538","sha512":"18388ef952911fe0a012f9f127fe4723ac0ff1dbceed80a8cbd2dfdfc7bc3a559f9584665856afa67919efd0f4aa27e3aab1fa5846e44f889c02fa6e1abc310d","ssdeep":"1536:iG3jEgoaPKfQ7VCXO/0MK59gqb2q9eoQtBgwKRrtr5X:1TEgoaSo7ncMMu879eoSGFRrJ5X","tlshash":"8a63126c01896e54bdd0ba95155cf4a470f7c0f4d1052fc2afb5d5bdd8873ae8233a28","first_seen":"2026-06-06T03:00:25.497507Z","last_seen":"2026-08-10T03:45:16.324613Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_2.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_2.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5245\r\ncf-ray: a0742927fc60b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-147d\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4vZSNDgMxEUp18qSvvxpAUpq%2Bwe7qQs69z1ovsn8r4SR9eqod5dIQl1k2ycnfYMJN%2Bn71%2BJqA8S03rVtUhAsNkJ8AQu3PQ6MB%2FRSktTaXnOb905xtZiKDzfAb9oKCXs1vsRzqW9f26K4LF%2FI\"}]}\r\ncontent-length: 4446\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"228beacc7e35aeb8ba3c7a1f495b666f","sha1":"382c172a825a54e59a91e9fd2ea63432c46b4812","sha256":"acb1655f142f531d56e193dfaa265f808e1e3a232294328e67eced97b2af4079","sha512":"78eb81f598f754077ffda03e3ec398aed96495245c1a320ac600573ea0d8697f95e4547c3601568a4964e535b93909ecdd43495a27a67c4d82eb500b80a6af72","ssdeep":"96:Gq3OvPivmwRFo63SsQuYgz2+tyNoMBsTVVc+UFZrXNiePlaF+NpI:Gq3Ovqewno63rQuYuwNoMypipieqSpI","tlshash":"ff915c3570cb1fec749865b79e640a7bd491a840c8d453ce7867817022cbfb62e9d298","first_seen":"2026-04-22T21:52:39.783449Z","last_seen":"2026-06-06T03:00:25.49867Z","times_seen":6,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/Gamelist/game_tags","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/Gamelist/game_tags HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,content-type,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5879\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-SksIfrRGstXQAJHtUqG9Rq' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a6b6d7130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WDvXStoGLeIt4mW4zNea%2FjnI5LeHzSjpLSUclLK0OPlDEP%2BYSGr0AiMQ6ZMtybWy%2FU8cW2dWbEElgr3PDU1W%2BIEFYH7fXZMG24DXVFn8UC%2F%2BxewR8gWl3Rs5wRkLC3cfWdNW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a6b6d7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_11.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_11.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5771\r\ncf-ray: a074292afc7ab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 154\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-168b\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1L4M2yLMkNc3B6ue0QxwWrlw%2FMB4cwAR0MZfQHOvczZlBxYeMhHzJ9Yh8gciTSq8QEsrDwZxxfRSOPxIIXEmJPIXTd01hWlu8MZb5Yjzwd29cRO3OltoVNOlV50Qm%2Bz3PLIjNazk2EOH3SC\"}]}\r\ncontent-length: 4976\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4976,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a265ea5e0c3cb5b3a35cb4d4b613a5f4","sha1":"a847bac8024642e9c2b4b5b6e10053ed68af4ee0","sha256":"23e30f12294dee9b77ba0728ff4f09bae0ba46ec8c19cc5ec8a5e65e0c85b73a","sha512":"ad744f13e601aebf6842f5d00718fabfea5a74cf91e860fa26eafcdf162677ba3d0db1b69a029e863c2ab79fe9608d00f2346603eabb3f770507e36be0e44545","ssdeep":"96:+8lUMTWtkLTgyWYQ8NO4UDJ7OzcMTN2PIDILHRa6:rWMFW7RyzvUxa6","tlshash":"3ea15c12d0266de8dfe729d71c0b320b1db47934b1d1acaf82736215e108996db16faa","first_seen":"2026-04-22T21:52:39.628494Z","last_seen":"2026-06-06T03:00:25.547269Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_8.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_8.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=69292\r\ncf-ray: a074292e3cb9b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10eac\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sCRd0Y1NUCClgbRBIynupmEoFZx2t7SlQm5wlSWG16Rm8d8gjXgqWyNCjVdfo2Z72a5kLLGGSYUZLfBoktVZbopdChx%2FOmhYvT%2BgfcYQNaIdBcAXBDlRdEkmf%2FwheViXKKkZsD97XUH9AsDF\"}]}\r\ncontent-length: 60436\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60436,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"971496bd1648a6dc3b5ad95dea15926c","sha1":"ecf25495de577d5053da93a4924e24c9e3d1dc10","sha256":"eabd6f55729354b81fd07579e3e92829436106c74c449c86f7121cb97a7c0bf2","sha512":"8d762663502582b89107203ea37666d76658de5f73b4d7bda9db0ae073637c74f8eba3848a1aba0d31a34770bcaed0070dcf8104645142fdf544391f4d854a2b","ssdeep":"1536:tVgIL41LX9ZZAC/DSFup2DONugJPVMmcJlQz:teIk179ZJbSs2DONf98lG","tlshash":"c943023d26af31054e948e8599e7fd473bbf0b2707e1a3cb0b74a15e67bd29b2418046","first_seen":"2026-06-06T03:00:25.467741Z","last_seen":"2026-06-06T03:00:25.500959Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/css/chunk-common.88c26159.css","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:20.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /static/css/chunk-common.88c26159.css HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OifxlyYjJuhfTyeZUR5CSmKO74lKXfxpg0VFu2nD2R4BYkrCm58wf9Zg%2BBXHjZk9qE6tz6Vl9VpygIODisgjB%2BcwQ8WZWKEMZrXFQhHaXb0XxNIw65WgfZdYf3cfOCmxZeozH2isrmihBoqJ\"}]}\r\ndate: Sat, 06 Jun 2026 02:59:21 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a07429171bc4b517-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\netag: W/\"6a1d3e4b-fdcb1\"\r\nexpires: Sat, 13 Jun 2026 02:59:20 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1039537,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64976), with no line terminators","md5":"6ad35f7161e78f3a9f63c4862648520e","sha1":"52c1722964c07501ecfff4f28ad9cf4ce5a88286","sha256":"6af6734bd35a79dbf3de8dfb909f08332e3af8653a70533e7c1b811a36e3e846","sha512":"639e510c2f336d722209b6b3bc1762772a1eca15582a60ea7b714fb669646dd3f15bd4083bfd340b02721fa057c0e9afe8e07244cdb70060c2223d1da690ecef","ssdeep":"24576:ocdRd9B1RL/AMe2n3ueCH2Hw3CFd7Kw+1U7eY0/3YqKxm:oc/d9B1RL/AMe2n3ueCH2Hw3CFd7Kc7u","tlshash":"6c253a225707301db57be9a2b9a0bbce7958c252d2138b6ff856393ac5c70c31272b5d","first_seen":"2026-06-06T03:00:25.309742Z","last_seen":"2026-06-06T03:00:25.502816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1139,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/app_down/star.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/app_down/star.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 232\r\naccept-ranges: bytes\r\netag: \"0f57050849d64dd2df2557d613c5dd64\"\r\nlast-modified: Thu, 11 Dec 2025 09:36:00 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eiDbt7W1G%2FoCP3K25%2FFduHZS9Zj2ZrbMXI3GxfZNDpjTI0ie00R5XiplG5UsAb9tKuGJZR4dX4lSaLV2ed8%2BXxk3nuOsjXcU9pOH2F6AfpyQhNoTda9HvIog%2BWulLMx%2FMldaiqcggKmR\"}]}\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=449\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 1898\r\ncache-control: max-age=14400\r\ncf-ray: a07429262b0956b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e110cf998632d84b930a23979f432c3a","sha1":"94a4975146c749d0c242a09c9b95e67c0dcac60c","sha256":"024f69156f85e4795f0b5f614f58af102fc043078ec9a6a3ebd32cef8a6b5cf0","sha512":"ef52afa72b2d84182a98eaf9bd18b13804ed18e68221ff2c4942ddd1c6bf3047e98baab0f3ad2622d9d2115f47c1f93eaccacad3f5c659c4134ed16bf34aa7fb","ssdeep":"","tlshash":"19d097b1036870925eb0208b4c91a42c80b6036a0bb1ac8166aa64b08aa2f241c5201a","first_seen":"2026-04-22T21:52:39.43868Z","last_seen":"2026-08-10T03:45:16.118541Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/surprise_pack_new_v2/close.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/surprise_pack_new_v2/close.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3388\r\naccept-ranges: bytes\r\netag: \"802b243ec8ee2e22d9f3e9a5b93cefdb\"\r\nlast-modified: Thu, 18 Dec 2025 07:12:25 GMT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=4567\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dS7cTPKsLOCEM2PGvruGMa0Zf7Y551KSHFPGfTL%2Fjw48DZy6YLpFbKAPIc9JAkkxCRQu6RW%2FEo6ZqhSnuLLBhxm6K1mgW3Gcbs03ezz9KqhgTqHVEzQdz20rJSxeYwxVVBsHe%2BlephW2\"}]}\r\nage: 1898\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429277b7f56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e9d649065a7d1543f53bd2d2d0e6d5ba","sha1":"0b54067e25903df756479ea0f48071dcd154ecb0","sha256":"7f351d4e7307a78d24fef325ff56087c242782709a6d910207f0ac8931315d2f","sha512":"38d236e6b77fb40d2b73933fdf492eb8b880a9a16fe7fe0ab549d9ecc522bed3f75d39248f668cb56ce78785e42544d56067c4178a66f4a9a88c66b18b5dd4bf","ssdeep":"","tlshash":"e7615bdb8f64998645fbfcc0595088c3e22ccdf24912e64365923db6db1a7d42208d1a","first_seen":"2026-04-22T21:52:39.572143Z","last_seen":"2026-06-06T03:00:25.50533Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_9.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_9.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=6165\r\ncf-ray: a07429280c67b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1815\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxZI5KXBK7CSykMKeNmM1c2zPg4aFn%2B9Bwz9a4NX%2FfYUlF9RXYBEe1qLi1reEQturE4jgqLFqD24EVjhp8Fzdfjqigu3UPiJ%2F1HM%2B5p71enYRlrYbw6RS7XDP7rntjS39Eqs9kH7lc4D4gm1\"}]}\r\ncontent-length: 5304\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5304,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"21c1a0854563ea3e9d52bd1d4aa647ee","sha1":"09fc9677769088b0ac5e22c152f7fa6593e96168","sha256":"8a3a181e4f68dfeb634c442c90b8d65bcb83d626534f9316cdeba311ffd9f367","sha512":"4970a4f823d2bbb040d1572cdedbd7506e766a9356987bbb33aedf943355ea8ca6ab8c55c4e5a3c78143f302fccb8718f08cb4d55938cca804c61617a87afcbd","ssdeep":"96:5edJM537Xed61A+5O2Jyvw+uDtL2SgjjIwwlHSY2x9mFBNbRAOVDvZ0j:sURedwR5O2Evw+KaSgXhwp2PmPj6","tlshash":"bab19f609cf7c6f033ebb02e87829c011188df0615a75e6646a4517ca83cffb3506ee2","first_seen":"2026-04-22T21:52:39.932607Z","last_seen":"2026-06-06T03:00:25.506215Z","times_seen":6,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/galabetfavicon.ico?v=52","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /galabetfavicon.ico?v=52 HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T42qL%2F9fAyvSDiczSDJpBdVdPtwnBMwkS9NgXuVAvoOb6zLfXsy%2FbDf2Ck9YAjV7mfpKIY65Uk2W2n%2BFzrtyJyYeBYpQILoXbITI7GJrvNBa%2FtbJ0dgwlAgF7fCHLrrTHK7K5ULeWeQw3a%2FK\"}]}\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncf-ray: a074292c4c86b517-OSL\r\ncf-cache-status: HIT\r\nage: 156\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\netag: W/\"6a1d3e4a-10be\"\r\nexpires: Mon, 06 Jul 2026 02:56:47 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"4b54628122ced124c485711535c846df","sha1":"bbf284b672eb1e10acf05450f2d09945605e820e","sha256":"c795ce37c18a8b0d6421f00594c9934e163f919c68978e99b4725af91d7779be","sha512":"91f8ed3849c2a9a0b08feae98e62e57030810bafdd73c99f2b7965b8a1fdf22e5a4da241bca9e2aaec49fb355c8a5843408693bdf32b8ad50f1d03281dbc7664","ssdeep":"96:yJRtLi/aBUwMiwmJEbKRBK487FZDyw5mHw:yztO/aawNwCAFZeMh","tlshash":"c791936c03b635d9d7fa9b393323c2bd84755c3c7d8d1300a921f2b36b636216ea9681","first_seen":"2026-04-22T21:52:39.533135Z","last_seen":"2026-06-06T03:00:25.564969Z","times_seen":6,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_8.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_8.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2027\r\ncf-ray: a074292d6caeb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 152\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-7eb\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwJINcfI1WYiQ6DrXirs4%2BTV3e3ozW%2Fk3TebQ04OHYZ7je3pS788vkPP8Ylmjk%2BNY8oTfY4aT6ZOMo70cQsTnLcZQo7LDxu5k8l7yuTVtkgu7nSRia%2BfCTIZRXaFiREyHAU57ZyzWf9TeCyX\"}]}\r\ncontent-length: 1754\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a484d050f0157679c570291ab031e7f","sha1":"73ed0aef4bcf5adffe4799c9819349370a7ea3fd","sha256":"dbc7a0330b4fef7c4d4da540550679a35eefb17295834a33d2119016deb69cad","sha512":"6275eeeb5ff9ad585d152e2c6a35635f99de647f51a9767ec0bbb7e44e14dbf2a2291b3f800c2bf185a3a255e278d4b896a199c1dfd56ee9dabf6d42a337c34c","ssdeep":"","tlshash":"1c31eb75f6d420600a0fb5551f796cb366d093e18dc54da59931902bc2b9158f5e8e44","first_seen":"2026-04-22T21:52:39.958486Z","last_seen":"2026-06-06T03:00:25.508896Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_23.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_23.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1947\r\ncf-ray: a074292f2cd6b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 149\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-79b\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrboU%2Fupr87aSDRBp3nH2xMFIc6y2cMte2jb9v7lr6BnvVwk55r1AgA7nPQYB8dCqUu9fjmcKyWE9Q71F1i%2F7KnvSR%2BLgRxWZ%2BkYQOEPZjkZeCmXdHmKEcaaaDerWbMwQVe84CG3J86WKTIk\"}]}\r\ncontent-length: 1700\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e7c3876213172795cac6dd1ea84e881","sha1":"b010a1c82b2496b35adbba9c99c992ffb8289016","sha256":"3525874fcd164287ab9c646eccf8e9394299629c5ec8b5594b9f1d91bd73c410","sha512":"d17fd58da27598a017ea6abf0e4f2517572565fe54c589613ba69c275b9fb82d6c55a11ac28ab072a40057220e77599dd24dad9f6a34017e448608e838a3e93e","ssdeep":"","tlshash":"6b31f8e0a174a2a6472959da371fe8d42a251c04221cb36b88352e35fd9329248cd62f","first_seen":"2026-04-22T21:52:39.800286Z","last_seen":"2026-06-06T03:00:25.566169Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_14.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_14.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2871\r\ncf-ray: a07429301cf7b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-b37\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XRrCM6nEorEa%2BTgsvPy3%2Fg1tEG35dK%2Bmo4q45QGYtt7SVn8Tezt0DPT4RmnzaGCdl1Nsc5HmFLuxVUR1FEeaQDGEl3Nzf5Bo0qYM%2FtjRIyYMB0kkvFgaNPaq2UuPDxc0VcKahYC%2BpU5FJY9A\"}]}\r\ncontent-length: 2340\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2340,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dcdb56f1954bdd9705028ba0cea0e445","sha1":"408af0d41635aa8b562eb07b0b5d09fb1ca6cbaa","sha256":"875807af35b01fca749d20b179460ad55c723f4c9a881f6744933425d16f4544","sha512":"c6561b2da1dfed2de533788897e846ffdb17bb278f135484edd3c4f3a77f27a688b3bd7f1a65a3a67f83b79bd1151a4526b3b60bc715163cd1e3774768d0dbda","ssdeep":"","tlshash":"a3411bae5f20426555442ac58b70fcfd90129ed3047028e556d79d86ddd202a777e90f","first_seen":"2026-04-22T21:52:39.46684Z","last_seen":"2026-06-06T03:00:25.511849Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/image.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/image.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 234030\r\naccept-ranges: bytes\r\netag: \"ee4d852b42784a499878020d53419fec\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:13 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2BI3XQNJb8fyG4Rc%2FbRnJuTCduOzbIQ3W3HxeVrpNBwpg57vn6kXAuo5bSafRe0X8zdkx9ldBgh6OvS7JTIh3z6LEJ3xVDPLdifQxL8s5YXqZTRF4TeX92UYvbQvbSYvjdJPfa2dzF9G\"}]}\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=310299\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4994\r\ncache-control: max-age=14400\r\ncf-ray: a0742927bba156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234030,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"24829b37a6b899a8875c86b4c81e4274","sha1":"18d6a682c629f15859bd09f5d904d485fe2c45fc","sha256":"5e19c05048b5f34e6a4ea27f1b411f692d87898d20f286af127ef32962b88061","sha512":"27369706653b5965fe28b45383411d4ab15258de2ac8f3e746c89f0557cb2184b97983fa42e6c057d2e2338cd8dd8a2d739dc3b45af78a5b6914d7458a7e5a63","ssdeep":"6144:rZdfoGF1T/YyCw8ho8uhxNMggBnAgAcoY0viFiw:Fdfo21T2Dh2XgV1oY0acw","tlshash":"7a342261e1061901624e5c7ea2a79c2d3d3ce37920bac75fb76018af53bd54bfe918c2","first_seen":"2026-04-22T21:52:39.961333Z","last_seen":"2026-06-06T03:00:25.512573Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_1.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_1.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=79762\r\ncf-ray: a074292fececb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-13792\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mdzOR4ccdqi2Pu5lP2cBYfwTj7%2BIKx2pDNf0WX%2F4VA1OwRwImNmm2PCwaYBIDINmMw7qOMjGfK1FgdhGOH1BebLjziub7dkQQdWPNt2xgIFjHsI5B75Vpg1ch5GSY5xiQ9Lfwac84wOThXPX\"}]}\r\ncontent-length: 69946\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb40ae1896ab1c22e906a20645098a7e","sha1":"97ac0f7da42f1fe9805e9d327fb4ba493c18b7b4","sha256":"1b7fcc0f9b37293daeab8bfafa7f30f592673f4a753aa0ac4c0321a9e0110a5a","sha512":"da0d9d56ba7273d2ae5e0e0550aa73f7b089cf3f22839cb6db3ba81c9d241cc7221afdf05eb34091e9d976872d9855f69a15b62d5ff750fdf2c8610ff6652104","ssdeep":"1536:cPt6SWsszso6/OhxK5Qiq3MXkDS/OuInfKEImY/TKJ:m6tsCznLKC5uk/fFImY/TKJ","tlshash":"816312d961be18612ad52cdd07b975b03100bcaa4c0405f7b537fb9e5639cb2e84b2dd","first_seen":"2026-06-06T03:00:25.305936Z","last_seen":"2026-06-06T03:00:25.513378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_2.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_2.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=74516\r\ncf-ray: a07429314d10b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12314\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dr5DiXXb4JSHZNRkDTBSP132DtiVXPpWsoCrfPi85azTYvUol9iCtlvK06qMaZyTaiJqKNfv8BDFUyzBd%2FL2EoLsOmFM8i1VmyjFKe7SZtMDjddgDrjlWvuWOOpsn8iKUwSxZ%2FYIHs1r3RT9\"}]}\r\ncontent-length: 65204\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65204,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36b0c438b1c23e4d678ae615b98b7109","sha1":"5b3d760f2ba11a2159712d5ee7ad5dda3708aa7d","sha256":"c8e2037388cb2ce5f78cff37a0fc571bfb8ace9cda0e096370073d7786c56301","sha512":"af047c2ade68f19b0b9c2b7f45294a6a448d0ac9b399c9d3106e851851d88e08a6c52c75eff52aef24fb8ba3c9ead3c95a0a3588795b0e215cbbf0e87aac25ea","ssdeep":"1536:bqtKP9cNqaTgvAlozvkurm99bncIMIgWnqxn53QwfOCB02:bqEPyoaTg4lGxmr7Ex531pl","tlshash":"9f53025bf8bf4953b277d918e7542388f22821c40bc55f94c2ac33eadf251f299a109a","first_seen":"2026-06-06T03:00:25.42519Z","last_seen":"2026-06-06T03:00:25.514164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.8d8332a2.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:26.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendor.8d8332a2.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 160868\r\nlast-modified: Fri, 05 Jun 2026 15:22:26 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: TUUpIiysxNSJ06xmzvGm20LkvBvUzc0e\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 01:54:22 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"8ffacc271f8674f0e54a2477124113b7\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 9_3N-L0IOsmE29_zyWOSfz1kZ0GhK4uotlCbzXqW9a57vn_eGDn7Ag==\r\nage: 3905\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":524899,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65463)","md5":"20f7d3f7e75f8e795b3e6e1af463ef51","sha1":"09adf58146ee666a9a62b69d73a864f3b1cab201","sha256":"ab648e83d4f9485790c367ebd8520f561fc7a535cfff9b222aeedb0d458b145e","sha512":"0759be7c3b3ca627a2430ce6cd45a6754b80a7820c9b88ac0919f8b65aab1c7a9f4a724f44b2deb138e61d9fc88642cbccbe9981c416ed85c303d62911d6d24a","ssdeep":"6144:88fELOO5nDnqQUsmtaVpqX8mbf0VzraZCuBkqQCTTtWhOxh/DZ:8GELOOD+aVGjU6CuBkqhlT","tlshash":"11b417dd7591f4620bf312f2407f180bb379296a284c4850f664e8dd78f994da23bf6a","first_seen":"2026-06-03T09:18:24.124944Z","last_seen":"2026-06-16T13:36:30.034478Z","times_seen":2643,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":12,"dns":3,"connect":1,"send":0,"wait":12,"receive":4,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Profile/0_0_0_Profile/Function_icon/Android.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Profile/0_0_0_Profile/Function_icon/Android.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 528\r\naccept-ranges: bytes\r\netag: \"453bb9b42a617a12b02b05b653c4bafc\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:56 GMT\r\nserver: cloudflare\r\ncf-polished: ok, orig_size=2276\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmhPzqfg4gCYoLWbNIfY8V2DW5Ns%2B4QSftmBT7wN%2B%2Bn%2Bu6CpNqUJW1Ew76E%2BKQSlD8AHKERZKBdEOQLDJ2n5lOhrtd1q7MJgVoPijZp1boipQ%2B1bdc9HVXomw9UgtkicFb8i5pbbwmdc\"}]}\r\nage: 189\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429263b1556b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f0f9b52a12df515cd016ea5ba13b6ee","sha1":"1acbb46b13f7897c10435fcbb537ff5bd43fba30","sha256":"48ab869893b55504d0362afd52592b22de78af2dd311e97dc9f9065963c0f62a","sha512":"a99361344a05a5b6de1836c1a8072aa58a1b171448472776d6b4ad5cc3d10ac1838e50f1949b0f4446ea5cfb9fd068d9017ab36f47de6c069b55e0ea8da6288b","ssdeep":"","tlshash":"27f020a28e3e29489a61e92eac1dc2af03a599fe1809e45727808d65c126037d0a6400","first_seen":"2026-04-22T21:52:39.746035Z","last_seen":"2026-08-10T03:45:15.629937Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon_get/4.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon_get/4.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18450\r\naccept-ranges: bytes\r\netag: \"af47c794c6bfa46656d223413b4f11d9\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:27 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xewQUlYJA6pUJTs9%2FeEEp9fr2BpMvKY4W6ULy2TImJM%2FAPGjn1yjXeWIJe5%2BGYypCKRn%2F25vDwIQbsNPZzdf%2BxIsAMR2yMrlXh2eo6bGuAEWvNd65ztPDmdcIvqX95hHjyrasyzgBc3j\"}]}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=24286\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4039\r\ncache-control: max-age=14400\r\ncf-ray: a074292adccb56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b85dc31e42f6ced425813a5ba07677c4","sha1":"6fc7bef9a2ffcc5ff5991866f475c5adaf2312e0","sha256":"3a4a66cdf7622c9d286ab55d8452e2d8a6ca0f84511fba5b54692dafbd772641","sha512":"786615faa27f4566eb189b474c763c5ffd9f4c8d87e0df5be205b79bc5d9580542a8210a029530d94d3bfbf1e54d7da1ac806a9dc362d85b27fdf2505385cc27","ssdeep":"384:1OyZ1KSQpthpW7teb9D+vX0zNWV1agsO+9sUKQdgfvg3xGtDHXqHP6OAQ0J:1oSGz07t3aNMsO+9KQdgOxGtzqHCOWJ","tlshash":"d082e086b3d9809d3dbe385e82c2d587177dc5010fea102028fd4791439ca9daf97aeb","first_seen":"2026-04-22T21:52:39.550926Z","last_seen":"2026-06-06T03:00:25.516293Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_0.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_0.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5729\r\ncf-ray: a074292b0c7cb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 154\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1661\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=njOtnnwx28dHbxi4OOhkL9OnsSKMcQFhPzRcjb2FANPphFt6pPnc2kTm5ey1iIECI59PzfoY62hqnefArTbgHncM%2BA%2BwhdIeYiJeWdT3k2gLwoWwY3YssouI8RIrElfO1rX3YJQqk8U5HIBX\"}]}\r\ncontent-length: 4378\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab9db2007a3659d7292dc5d8a9be5ba4","sha1":"49e2d4b6c6b2ce858f1999c9fd9d2c17692e7a20","sha256":"6d61c56bda60f9d0992a829db3a5512a566a096e7cd0b4e0c8073a5c8ec1522c","sha512":"24be8ed0476817c479f2ef97059ed165864aa450122bc82be71ca52aeae69c793916646f2506e83442d17aa129812609fc24096425274322935736ba0f998580","ssdeep":"96:5IttwoEjRHcd/oS8maR6txbaX6+7DVGdzkZNjdb7mcbOzPgYjMB69LSu6kl:M9aR8uSfaR6txb4Iktb7mcbm269LSpkl","tlshash":"f4917c2e224b78bf4041af7b708414288a1fcfb53271db344fca10c9588b6f81a642dd","first_seen":"2026-04-22T21:52:39.697308Z","last_seen":"2026-06-06T03:00:25.542338Z","times_seen":6,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/gameList/bigPrizes","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/gameList/bigPrizes HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,content-type,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5879\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-NCLH35taB4yXcMDsGLzHCo' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292b1bb07130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iIXdimVFwSTiTql%2B6BjALzpsj9Q0XEo9BBQLTF1rGIeHzJn6kM4rIW0rwuQhBmQXltaBGG9fYj0BdU0DN60Ykot0zkQ8kM%2BFzqIF9ixmBM%2BNpP9tgFeXBhgRFnXVm%2BKNWgJM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292b1bb07130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/common/lang/en.svg?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/common/lang/en.svg?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vBeyapbzduOmk4L0UxHby5s7tZ%2BvAKlfYwZSA%2Bcnq24SLsMy33XbL5O1GltdQglQjnx7WwG939qyCI8FWqpjSYXoDYZqs15bgicsEu%2BcUXAYXgqth8Tpnp1EU7r7lvDycjVEh5Qdl%2FKD\"}]}\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 07 Nov 2024 07:48:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nage: 4994\r\ncache-control: max-age=14400\r\netag: W/\"cbc63ba5a4d3dcccf0823408e405461f\"\r\ncontent-encoding: br\r\ncf-ray: a07429263b1356b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1678,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbc63ba5a4d3dcccf0823408e405461f","sha1":"22ac5b36755423783040f207b78b6d3860034ed7","sha256":"fab8d52122b584fdae9e4d03333ebc0b2c98964e06ee7ede7e54ec5a43c8fc86","sha512":"b220889e88585859be5d46e31308e06e325f3ea243d1cdd9b5cbe3c7c0692e1b20ce013a0308f0e19bc024f4aaaf29a53825836be9c20b91c8fe0e02b94c74e1","ssdeep":"","tlshash":"633110a9464048f8f411c6951bb46da112f054c2e1b2d1ecbbbb157bea0e9c0a7e8cb8","first_seen":"2026-04-22T21:52:39.729733Z","last_seen":"2026-08-10T03:45:16.174991Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/user_behavior/eventReport","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/user_behavior/eventReport HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,content-type,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5900\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-48zs6nTPZCXeBpBKIjBwhB' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a0742932edcc7130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Y5T5wSzUFXcwQp11FLZ%2BASOoTUi4iYKN40Zk6FVWBnPVEsV4NOTi7FlQ6Iy3qTSihOP08saKDaAN2pSvcXX4eFHLAsDZfye52u6AiqqeMUI0ykaH02TbDoEG6%2BSQzdxiptF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0742932edcc7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~sentry~app.6ffaf6b6.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:33.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendors~sentry~app.6ffaf6b6.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 26228\r\nlast-modified: Thu, 04 Jun 2026 17:45:32 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: pdDlHoVxvOpFOuZ4dYxzi0AokIfrC5t0\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 01:56:07 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"f02797b80995cdd4a956d9912aabd15e\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: k63mT6Gnxx1lSHfezrVFgc7v5cBmeFi-35JXE6KNwQ-Ve_NdBzMCRg==\r\nage: 3819\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":79172,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"043179025e75b3f210655e32ee0f1a9f","sha1":"368ad62b6af595cede271e7ac4140106ef780284","sha256":"9b03ca1d1601cfaad1efabd6cc84f753eed5273a8746779df06f479bc2190075","sha512":"bab8a9ca8bfbd122f5febe5f793238d0ef40ccfdc2f223de2cab77c157421f7ce45f1c682abdca68466a45bea4705d1be8d21be78a64b46b409ce7123265227d","ssdeep":"1536:cAy1BQKh4+lC4el5txG+u0JnbrpxyR7+hlPp:cAy1Jhm1l0Lan5xy0","tlshash":"0d73a2c9b1d2b02053eb19a5903b410ae77a5994300b8490f67cddde7eba15ee273f2d","first_seen":"2025-12-12T19:24:48.741414Z","last_seen":"2026-06-29T09:32:19.293131Z","times_seen":8806,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/down_app/down.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/down_app/down.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 364402\r\naccept-ranges: bytes\r\netag: \"8329b890874f1fc0ca4b60c48455afa0\"\r\nlast-modified: Wed, 08 Apr 2026 08:10:58 GMT\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=507435\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIhPl6A3BnCAco1Bv8hqcR64YPYhB6ElgL3bsCX7clfWjpKchbrjtNtWWAOZTdZnl8DnzQ56kS2OeZYIlvuf8vdMsuMMNgk3E%2BYzzaL13pnUkXCgDQhK5b1z6HxQBLwJUG6PAO7Cy9DM\"}]}\r\nage: 5363\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429262b0756b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":364402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1ee97659f1b1af638c94a29ac56c0e5","sha1":"e4a350798c85e35d061166d24f25a3c1df1b6ecb","sha256":"1287e1341f56532c0dac5ff5d75cf87297b777ccce78a260cd92c2d46bb41b5f","sha512":"2a1d3049953b68f4a69f4c73f2e2f9eeb79d80643421fe192c9b576daa1df5ef6b4f03c02dac2bb31f1a03c059e6557eb98382081e86768353eec620db90559a","ssdeep":"6144:dfA/FJ9PiZzkCfs94RogKPLGzVLJWXp28gW8RmBlI1ho6CWKk36N9d/AZZHjwzOb:mtJ9YzkCfy42VKJMgc4o6SkK7d/AZZDV","tlshash":"b774235825f58e16af3c4cc2bf3a078a5087ea90531e3c59423aa3534faf917e7b4587","first_seen":"2026-06-06T03:00:25.397726Z","last_seen":"2026-06-06T03:00:25.520379Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/ball3.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/ball3.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 72126\r\naccept-ranges: bytes\r\netag: \"24d2774844e99c80c07f2d71e8934563\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:12 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DGr5y%2BvJUxS2EBC%2FVdqRkykPabJ2n8oWDSSnF9ycX5TJ94nHDJGg6vMWOKcjCh%2BR2QaTmB6qQlyfwY73lYY91qMI7LETjVuLlhH7paSE2NUpb%2FLMaHUZtD3YdynpKjmlmkyIZZnrGKV1\"}]}\r\ncf-polished: ok, orig_size=108542\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4428\r\ncache-control: max-age=14400\r\ncf-ray: a0742927cbb156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72126,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3f2a1cfd2f0af22169640531b295f0f2","sha1":"c74d0fee4f51b09e5b281f3d66f153a778220460","sha256":"64b37267f5488abcb4ad69cf0a5c116c4d78524e99b8e7c9339ce10cf024ae21","sha512":"8ffe23e7b6e487abaeb9d0af2c2717b6931fb183e54dd6541015c4264570a17fe0600efe2340fa42344d8fd2b5f6227b2802676e9b904ac0487a123c21d6f26e","ssdeep":"1536:gge2vB1ISSzV0DffG0pyVNHylapBZ07bQ3yh091qwopPjjwkG:gge25F+VNHvp0g3yW91qpjwkG","tlshash":"236312a429001d385c56240b687ef74ac74e8ab96bbf0257b918ccdfb94e7bd1450f92","first_seen":"2026-04-22T21:52:39.815936Z","last_seen":"2026-06-06T03:00:25.544755Z","times_seen":6,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/referral_rewards/reward_bg.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/referral_rewards/reward_bg.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39692\r\naccept-ranges: bytes\r\netag: \"6fbd9c1c4b42411d774ca3c0638058f1\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sud6iPv%2F6wBgkqXmNfebE2M0VIKHAMuHFIEBrb%2BZzzvucFI3sIAanmQK%2FEdoJ5Esf1NZfv6cLFpNXVqMIXiTmva84%2F38Q86dZuUEK9p%2Fr4hILbct7iJTf8prkNnoj1KGOGRDxhUeazRV\"}]}\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=59196\r\nvary: accept, accept-encoding\r\nage: 2759\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742927fbbf56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39692,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba5bc962599b05b2edbfbade2ab082e4","sha1":"dfd41db77c3cf6cb4e0f786009b41e299c66b154","sha256":"59f6f7af9972fa71c233c9a8a4d4722ef3bae0cdf9cf343533ac57ecf18e7170","sha512":"77a3107ae56e079c11e44b2e705e3c4b23d6c10e8ebb7ea58cfc4d7caf574a391ae9f04af96b95cbbf3dc0e966872674d439244205419d97fa356d0ce7d4d27b","ssdeep":"768:mP1iLZrpnQctOPPFGT93izKk58zcoObNxaIbmFjghyMgBxccVLj:VflKNq1zco8Nx8FjfZBqcVLj","tlshash":"5803f17cabe67bb81b9809f151d0107a30525a5f8756b2b046857f9378f31d70ab08fa","first_seen":"2026-06-06T03:00:25.140137Z","last_seen":"2026-06-06T03:00:25.523007Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_11.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_11.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=66746\r\ncf-ray: a074292e6cbfb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-104ba\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FUyGCmJxSNvCZ24IGSBTvRixwoR8IKPV%2F9UqP8u%2FXTbgyTHkjI321a9uLMIEGYDleDESroQKfW4Nu1dLzvILlUZHAE4qiUiIZON0ZFg7AxGTTZz4PihMZ1ZPYLLHT%2FhncmAGjdmYLLrsPaFd\"}]}\r\ncontent-length: 58180\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"646bf531afc5c3e2a71a9936e2566936","sha1":"df79db94564081a3d5fcd8c345343c9a40177354","sha256":"e346eb191b1c048c12d668c1fe57f60dd6e5269008846ffe72861024e186338d","sha512":"ef3106592bbe708f359813de17185b9ac6f6dd25a0e92694739eb5a5515af582d07c9bcf9cb853f36cb234b7e51034ec89badb11a3ecd04bd12563fb0ccd66b8","ssdeep":"1536:LBl7onPLmIqdwwKoTgsHsgAX1BuC2xA2b:9l7VZhcs8X1BuC2x9b","tlshash":"3f43012fe90f3e320e028a8c1db859eb66d3d90214e766bf795e9131f4489c3db28c55","first_seen":"2026-06-06T03:00:25.505746Z","last_seen":"2026-06-06T03:00:25.523948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_12.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_12.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=65609\r\ncf-ray: a074292fdce8b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10049\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0POEhzJgV%2BgOxXuoLjHsud%2F0mxzppl4aot8T2Z4kFNyo%2Fi%2Bp0r0HJ2x99cA9n0UlfLrFh8EyNMJxeQPXXnuUA3S3KIoOok0IwtBPn8VQc4aqKN8r8yqi0HFs7KzXBqav8EHrYrctFeOII38q\"}]}\r\ncontent-length: 56672\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56672,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bdaa7890031783b1f25439d38eb31c3b","sha1":"22218414cf523427290d59bf805348a6382a92da","sha256":"0b6872e2be272b92a3d2bbf830e960952ab971e8232ab856ab8e304eecc03038","sha512":"9635d886dbb27c4a9a164e7ce28ec2c1e8ac5a9cf7b20271412fd49d0b30a55cad5367d9d4d5c9f7b37fed16730f7e9cd8f4ed19cb8909d505fea67431ac3744","ssdeep":"768:9eNF9M9BWBw96i/m9f6jv16EaZTmRhHcXq0CBh0icZb6Cn6Q14VIQrQHuMXdqanW:n9BYwvuMjQTqcz9hr6Q1EISbaZbOxCI","tlshash":"9443f2e26e961a4cc8befb65252cda5c401ba9ccba0f13d0d4dc60eb55f11a3271af5c","first_seen":"2026-06-06T03:00:25.410303Z","last_seen":"2026-06-06T03:00:25.524745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_0.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_0.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=80028\r\ncf-ray: a0742930bd07b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1389c\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xaP4K3AVjsR4cwdylsJC%2BWnGTBxtFYnilpbzK4LgKTP%2BVMDgNgMLgqR%2BlwROO%2FYbMo%2Fkyk%2FRzVAFMe5WpOsWp6WJTfEiTV6yhZ7kK4Nf7lvwhDS33IJwyLTLTlsus28mmsChaHR66Mo0qRpy\"}]}\r\ncontent-length: 70214\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"59b45037062499a283d6278e8c2fae27","sha1":"beca1e9e7bd29a3a50b1794df5c8a4cbb6b660a0","sha256":"0d41cef8cadaa97e46772a18e39ea6d3fae221f327738e3b9369b227f15e5881","sha512":"e3397273530ec8e36d478d04c30771c79d42c560a250ff7afb895ce63f069e1bd37a8153dbc984adde273ec8096632e813b2e239f71987fd69f7c73af8db5bc5","ssdeep":"1536:RhjBRpcY3ILbUYCrzjB6LoGv/SiMowpMkxPj1Pjp/zSEycPE:RHPcWILbGh6LoGv/SaajxZPNmEA","tlshash":"0463125145a353eff45d73eb8692b2b6203cc6a05822956d92ca22c0cf564dcbd0feb9","first_seen":"2026-06-06T03:00:25.403706Z","last_seen":"2026-06-06T03:00:25.525539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/PC_Activities/mini/gif_15.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/PC_Activities/mini/gif_15.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7242\r\naccept-ranges: bytes\r\netag: \"f0a71b61c29307ad2a177a20bd4cc339\"\r\nlast-modified: Wed, 08 Apr 2026 08:10:41 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k3Yef1FOKn89KpgtCZqiAiimCYtMSYj8%2Bv2vYr%2FUmdekmEd9FQ29TQmaI6AzjxYTqAMGA4Z8hdcXSEUWIxaPbuA89GKip%2BpKZlaCA2bJjsS3VNJMzRuL3kqvTSwZF9AGf96IMhV6neHc\"}]}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=10324\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4772\r\ncache-control: max-age=14400\r\ncf-ray: a07429262afd56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7242,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1085d099c07d32971cfa921f3604fa1f","sha1":"2bc11b617d9d0dd197fa7bb7c23649fb16b46760","sha256":"49c8a6af14472f46f708d9516110e0ab258e7bd4dad9197348e144f7362eb207","sha512":"07fe90dd511924900306d4bc9b5ca24c705656147bb4515c5836e603820495587c33fc78d48785912899eeab0fe9753a4c67e6d20da929548045959685350192","ssdeep":"192:YJj0DgZMJRFCo9QkRdHKXMVIgFjbMw4fpgYBmbE:YJj5qjcUuuv4faYBmI","tlshash":"b5e1af44a37175bff1409f8b10473b511c1af636232286959de6f377a39c57e241426b","first_seen":"2026-04-22T21:52:39.955525Z","last_seen":"2026-06-06T03:00:25.526391Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/home/nav_bottom2/3.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/home/nav_bottom2/3.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1056\r\naccept-ranges: bytes\r\netag: \"26c6615843721221438babf037d5add8\"\r\nlast-modified: Thu, 09 Apr 2026 08:52:15 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2FjugiPHVL79XMyK31UrRy0Y9JjlfOt6Wkf09a92sFCprMxbf6dHHcXY2cVKKagauohpE8qnQ6juccZi5cCpmf82uKgHEC1FCVBdwIYCzqrU4dU4hCkZIDD%2FRSH65upIrJnlmEKZzoPG\"}]}\r\ncf-polished: ok, orig_size=2626\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 75\r\ncache-control: max-age=14400\r\ncf-ray: a07429266b2856b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1056,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5e1ef1a7521fa920a62322b6f185298","sha1":"27fea88459f98bd2034529222d140af797273490","sha256":"f5fc88f90a3135aa37cc06dcd63badc51b0ad036614b1ecbf0cb68022a3a21e8","sha512":"bbd25ab54c2af19f8b0dd318fa90e1afd62e8bc3801b480e7149038b1c65d5a105c83da14e1cbd87f60b05203911a64d0028a7f4188d61e29d3be8f54726a4a0","ssdeep":"","tlshash":"2711e909f3179590918ac8377e8c34402a5ec3460f076c320b17f8b31a28a9b4dc71a5","first_seen":"2026-04-22T21:52:39.926009Z","last_seen":"2026-06-06T03:00:25.527038Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/club_home/button1.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/club_home/button1.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9176\r\naccept-ranges: bytes\r\netag: \"5d2c11398fc2c6416b39eff16cf0d562\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:05 GMT\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=13081\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Cv6%2BbU357Xh5Xdja2hRjH9lB2VtjU%2FAYYQTWTE3rwyEBqJJvkRqTO8%2ByXKWi7o98M4IM5omuTrA84JDFzqkIev0qOAl2xm5KWLNukz3T3K5bTxrf9YR80i%2BtNzBvVDoQEJ%2BfilW6Aev\"}]}\r\nage: 1692\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742927ab9856b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da0ed9ec2daca3b54c6210cfbaf5cd15","sha1":"d7fff9a2c814ae7430eee1c86873041bf00996fa","sha256":"b16e8af2c84f95aca99815f53f294604ff232f3afaef59fbe95e6f5a183d6f93","sha512":"2ae55207bdcb21342b8e2b3265a89ecee94f213e2a2e8eb343b3503f2d43b15fe391d8f02c11bc9c024cb86624e87a54bb7411392f6005836f206382ae2c2af8","ssdeep":"192:hLf2p8A+LkURYT7XjLYxPfOdZttdMN37ysncvQTLN7x/RM:hD2p8kUu7U2HocITLN7x/RM","tlshash":"3512bfe3e6736f7c78e5c47e888b14640d387b9f5f23868e54c610177e123d9a1ab492","first_seen":"2026-06-06T03:00:25.413067Z","last_seen":"2026-06-06T03:00:25.527694Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_2.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_2.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=43623\r\ncf-ray: a074292b0c7db517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-aa67\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hDMlOFuZcU87kTbY4qp6hiXX46YXCUXdZe%2FEGksAlU5ZWUAjSKpB5xXOKkHE4kPZp2Hzaygxv5o4gDfJqVFAqHd3CzyMAV4cYsEzbPP5ZZ6YeTmMHypceFRKiTqdRRCqFskoTWrmkrdfdVM\"}]}\r\ncontent-length: 35448\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bcf5e9a0120146d2222ff298778c64f1","sha1":"411c7778a4a5675692becad3961c3a4d13b03ba7","sha256":"f94e8b453533cf00fa386b6f00bdc9a2343a5830223bb350d1aab35f7686f1b5","sha512":"c57277eed97f771790b4d806b5808495c3504090d4004882cfa87d46f50797d0d42269516246c23a68c15e8929aa407da5c20eec95eac8b4adaf31138a6f26e4","ssdeep":"768:rUH+qfBwfZPu0r0I1fo71LgnV2TzQwcwcqdy1BN2/cr2NbTYCfeQmg:gegBUZmY0H7+VIMwcwtMa/XNBz","tlshash":"a5f2f18063b0de471ea625eef34b488ecfe54e2e76b2e0757051383a714a505f58e9dc","first_seen":"2026-06-06T03:00:25.374983Z","last_seen":"2026-06-06T03:00:25.529442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_9.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_9.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=69873\r\ncf-ray: a074292e5cbab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-110f1\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4rCjpQLvUZ%2BwLm2ft%2Bml2A2ICIufHO5L4mfnyIb6%2FGQs1G1JjUG74lI%2FAF8xQ4FybYPaiag0QLXVL%2FIYylJzmUxC22%2FRe7MFDRS3GvUdJhNePQf41SQfxHSU1Vl6CaOv%2Bow18xIaTNd8lLiI\"}]}\r\ncontent-length: 60360\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60360,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f164b593dddaab1698645c3451553ff2","sha1":"3d5bf3e4f7c5f46b2e7136ff90f29a93f6e93a38","sha256":"f05ea9376ed2110cada2d300715b37557f518eba910ce9267a1d6f77564dfdef","sha512":"310a52ecdccf8a8fb5aacd8185bcc9152c5aadcada30d123979009eb0253989f2554222ce40e567e9bdd633a647b60cda5c08f54a64916ea38cadb0c2c8d9de6","ssdeep":"1536:Gd3nvYCChu0wfKoplQIDGUxAoGPQ3t4pvla/Oh:G5Bku0rkqIDGUxQst4pNa/C","tlshash":"714302742401ddc8899cdef17aee96360b693e970325ec74b8f917e0ef25511be2c984","first_seen":"2026-06-06T03:00:25.178967Z","last_seen":"2026-06-06T03:00:25.531189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_2.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_2.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=73130\r\ncf-ray: a074292f0cd1b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-11daa\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMQyPIEEeQmz6EOC5elRa6ard2uTFwvzV4c0dnvzr1pvszq2zU9seprdONDTfOmEh%2BSttQqKV5zgbL89WhAS7%2F9Xvqt%2FUNFlApzHPMOy7iU%2ByIrs%2BgK%2F5Xn8w41GnhSeNtDmSA7CiPrPDNxI\"}]}\r\ncontent-length: 63958\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63958,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d348dd87d0b98be8e531f94b9e556f4","sha1":"3b3109b97f5e9c7c68132e6da101d66b08cc5547","sha256":"e2c9fc8cea6b62ac3432882fa4c915e50e1e2c5c50eb2a4db5c1393e657eccef","sha512":"753927006e03aed28d3316660e45d1a57de7f75ea7b1a928fbd7c7ff61196ae0666f978400ab2ff8678a42d1ef831519ef9132b2db55ba7ac8bf67756e499d77","ssdeep":"1536:16IG+BcLwcfk83g0pWYyyA1/qTC9WYisfqa3p9Qe3vktoWFqX:18+B4fk83HTy1/qTC9d9fq+yKyDU","tlshash":"8353123366773031720a389fe6b0b4ad7e8d360bf02c49925910d7573685cede6698e7","first_seen":"2026-06-06T03:00:25.532191Z","last_seen":"2026-06-06T03:00:25.56042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_12.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_12.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5704\r\ncf-ray: a07429301cf3b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1648\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NE0kc88wDloMu3ZDuJF18NoJhZU3kHxAGsO1ugjqaUDZ4scVslJ%2BED4L%2FNz91mDB%2Bbb60ECQVziIW%2FmP3OFqUOPLbPReyhwGOwshUFZIpCHF0nqpNAU%2BSsPEW2v192eZZ8HBpn9NQbDNWfoT\"}]}\r\ncontent-length: 4448\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3beaa9872109cb5589533f5af9c9802a","sha1":"ce9c2030271b71be7b694ebacd934b3e1e3f5fab","sha256":"ddbdaa9434c7ebd8570646beaffcdf0b847b668351a8405c2187135f2b2f67ef","sha512":"c6ca6fbcf1560c373ee38b2f58be177f9848dbfcb9e792eb18c0e4a48b3fccd01eb96b57f31f6b8d1113d4bed1eb1ac09d2d52e4262e5c6535e3f9252fb5bce5","ssdeep":"96:K3UVdPH1mr0sXj+nSiq59aTX+ENfEAeUvPZRPiYG/2ND:KANV0sXJNfnTXLiQD","tlshash":"96917e77011db54a80cc2cce5dcced00a8dd1a6e99a9aab87f357c8c93e0d5191545ed","first_seen":"2026-04-22T21:52:39.85739Z","last_seen":"2026-06-06T03:00:25.534344Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_9.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_9.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=68700\r\ncf-ray: a07429309cfdb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10c5c\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DOZZlCem%2BKtBNsNczl0LBdj6vzkfL8nYW7zVfeu%2Fyu7BSFeOtKiWmCQiHrF2gr1hGxwiDnDZ1TIpDD8gfIDbUV1yv22f%2F2e51lXKK30%2Fy5Vq0hp8zCJvMM70ZVykswje5yuelOnK3cF9goPb\"}]}\r\ncontent-length: 59390\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ea0076d935d69e181d70fd464467e76","sha1":"bd9eae020098318763ec5674e8d7673e5270a22b","sha256":"e1dbc666208a9c4574f2e53b6c5647fefdd119bdf81e6e7789ab50a3de2e3b8c","sha512":"dd1fdeab6f355b6b8b5fcba085fe5e9d65c55f69b6e376ff01b58b6bc14698592afc8d80374298ade74b8584643cbfe755a120cf92f9c357bc7b8e90d0bdea21","ssdeep":"1536:xa6no2f7qc3p7PiOa0wPR5twOKmJH0t5Zy8rH:xa6nJf7rHiRI7my7","tlshash":"2443027eacccb5f0a84ba59b39d15d818c41b9a7e9cc920cee445077153a387e44a8fd","first_seen":"2026-06-06T03:00:25.517457Z","last_seen":"2026-06-06T03:00:25.535091Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/css/galabet.5d16fb4c.css","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:20.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /static/css/galabet.5d16fb4c.css HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2FeFK9QvmIRaxj4KrUeCaqN65nvLbKM4v4innmQRJ1SYWfCBH0dDUMZe5Kwazsc07SorUs0IH1J7JBIyOxO19UG186BJsXsv0yHS72XZyZraL54J9HXjVa0PXNduEmD%2FdrolNryAzJpUkUS9\"}]}\r\ndate: Sat, 06 Jun 2026 02:59:21 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a07429171bc5b517-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\netag: W/\"6a1d3e4b-51499\"\r\nexpires: Sat, 13 Jun 2026 02:59:20 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b823a154760489078da980ef1e387eaf","sha1":"351bb92df9919a366ff874dda416ed0414446185","sha256":"4f07793e8d94753e3fe6525ce36f6a972898edd483cb1447784a949929e39d55","sha512":"f7b9241ba1d1c29b441e3f57158b9d90558c40f59178d393fdac2cd34543c791e07c8ff2eb39148ddbe458535893836e68841b0c5a0cc7de776ab903e12a3adb","ssdeep":"3072:Ct9EtZ888KkXWJaK8KL3XPkA5L/eHZ7a4PHzkUmtggLP38mfJN2tKI:CXELAKkXWJR3/kA5L2HFUxvlJNI","tlshash":"a064ae33a38b341e7227e466711173bdbd2cd257e7028f7ee91abb3a858a0870573549","first_seen":"2026-06-06T03:00:25.285022Z","last_seen":"2026-06-06T03:00:25.53603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1138,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/common/get_activity_advert","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/common/get_activity_advert HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5903\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-Us4LwVW9wtVy5yw5hSK0AJ' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a7b797130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9yVilgyXa0kDb1O34eHBLsvpZf8SWLylZcnatFguJDDksLPYQhh7jKPbxDigD%2FFtbQEmz9WorEWWG0lD%2BxRNLnopYAu1GFaB%2BU6UodjZLhIQFhW06jIYpWf0L4LKv5EYnmJe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a7b797130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_7.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_7.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1863\r\ncf-ray: a074292d6cafb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-747\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yK3i30WfVT%2BDFAXY%2BgEMMzjo89BGYBxOXREpFJZRRFv5Im9%2FhD1HsxznMva9LUxa43wzmSPiku4IPHp4zxy3BJS5FknDqWszUFwT9HsgOBA19zEYJVBbgTHUYVzaEdL%2F8NFAQ9n321Fp3mNJ\"}]}\r\ncontent-length: 1590\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c93adc72485dd95da20db43ec3d581d7","sha1":"ef4a93ffb271121f054dd911322e1b970b33c6cb","sha256":"4f38deff04c5fd716296f7d72e65bdc25f819360151f94a4ebea2b6b70a66d02","sha512":"76397ed92f2e2e982cc23e8865327fb28a511db4bf24da1c5800bdcd7d48ba99cbac5e6a9e47e8464e62c8653c81dcbf062e6be2c8d0561e833938e7537c0552","ssdeep":"","tlshash":"9f31c573ab44455283190d8e4b838595aec4526bf0838d57aa3bbaca54b03329fd9bc4","first_seen":"2026-04-22T21:52:39.796619Z","last_seen":"2026-06-06T03:00:25.536931Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_17.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_17.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=16961\r\ncf-ray: a07429322d28b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-4241\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bpN2zmFr96x4zLRobynIU5kckPUYujQXn68WEaG%2FgiSBbQLnCuuaKBmX8slelew3leQEzabUJOYH%2F%2BeEfuVGRiHxCNgb6oabhF1DnKNbYfK4KBM%2BetiKfiZMVlRf4cB%2F7DHet1POfDPtYih%2B\"}]}\r\ncontent-length: 14074\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14074,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ea0feb1f6133f92773aa824dcb4c43f","sha1":"18ab3c6eae517d56684fefa39193a45b25cc3460","sha256":"a2854d83b3bde0630753c0764e6e204561394c71eed89d74985c57906265c901","sha512":"b9507807c366ad7a0597eaac0a4c8bf877b5f9403d1cbea9ed60055e53279ff7f252122ff86a4595fdb8759ba277c4b82c4a4ed96de44bae639cb6301db7d613","ssdeep":"192:tO0J6VJYxmvLlkB4eiKa471oqlcnlKvgNrz4iX5qI+6b+i2e51JL:tODikLlkBPS4h5OEvgN46q5C","tlshash":"5e52cfa68c4a534fd2984b0d388e9671888f48caac4f21bc67952e1e80c543ff50bf53","first_seen":"2026-06-06T03:00:25.283528Z","last_seen":"2026-06-06T03:00:25.537736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/user_behavior/eventReport","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/user_behavior/eventReport HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,content-type,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5900\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-pQe421VdONuRGLnq4DoE5B' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a8b807130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ntk8WDifkArQM4swvNNyBHOdl0LUJnXj%2Fne3y8a2AP9QlrEMAdYvM9ucLiAjtHMPvttMm%2BbzUgwcpviSRwOCy%2BFO0ZLPMxJy3f34n2st56z8Qc1kO%2FPZ7yvGjI6FlZ%2FaSk8b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a8b807130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_32.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_32.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=82983\r\ncf-ray: a074292d4ca3b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-14427\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Qy%2F1VFY3itj58%2Fww1pjMSyeMvKg6Vp9o5lOvjOri%2B3MXFVzDQa69XnphfCuhifsIxksitq5jRwws%2BbhfSvCWgzMdsgacsHP%2BQreO28MoKk83xW%2BvPiyOTNgPEe07GLO9Wr1leUt%2B0%2FnERDp\"}]}\r\ncontent-length: 72056\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72056,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25e5b5112e13f7b06d6dcbc8bf707faa","sha1":"f087b756806394ced72484c227f6a1a3adffab7f","sha256":"d6ca4573b2cb52eaebbd7ace55d85d614d434f8194c65b021bed42310894cab9","sha512":"997b023d621c74c7339d42f4583bd445ad122f52a24abb839647d2279ae90819214b48b13dfd0345717ec11032bfcd7c6e891d4a682d90c13ffc3233522fb93e","ssdeep":"1536:EZ4c/CrK+ve3LlhlqORRWf8/8iC2PHYTGavRmjsOjenPU:kFINELjZRMC8iC2PHYqavU40","tlshash":"4c63016e69cdc8eee14a23115d976382658bbd7e97daec7e0570a87c20bf400f2c1275","first_seen":"2026-06-06T03:00:25.191776Z","last_seen":"2026-06-06T03:00:25.538559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/PC_Activities/gif_15.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:22.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/PC_Activities/gif_15.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 215786\r\naccept-ranges: bytes\r\netag: \"535a6ecb67610fa130e21da6b7cc9075\"\r\nlast-modified: Wed, 08 Apr 2026 08:10:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7bnSGpCb6CzX1yrhSvJHzPqqo1ZQIyOUo6w%2FqLmtkrofHdbIFNJbVgeHwERAAItKU97z63vwLG4BG9RGS60YxEYD37mW%2FWHW%2F9nFS6pnMdvUuZ7GyD5lYgyNUFdgfGt85tkxZAP6lRGj\"}]}\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=276502\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i)\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4993\r\ncache-control: max-age=14400\r\ncf-ray: a0742923aa3056b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215786,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4b5078cdb026c0d31fb1f08b59993811","sha1":"4412aa4efa430b0f5ac7fc2699be28f3d7881303","sha256":"a7bc2adaf7942330ba4379669937a90824a085223aa6ad60d9cad7005f8f7266","sha512":"92cc77e995410ba0c9b8cae27c8307e75b05bb59051b97455f906ca6bcae69c408a1d4c94a40d77a7b28f803160f256ae880942ed3ea2e116d65ec7710593f6f","ssdeep":"6144:sg0WC/wB1vUiC7x98v/tf0J4EtJ+2BQpgON2:CWC/C1snd9W/J0JX6pgD","tlshash":"17241302ab2a9d10555ffb1cf4ba3db6dd09141bbc27b4318084b2abacdbe7d4a05d4c","first_seen":"2026-04-22T21:52:39.765102Z","last_seen":"2026-06-06T03:00:25.539446Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/theme/dark/respon_es.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/theme/dark/respon_es.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7248\r\naccept-ranges: bytes\r\netag: \"a73d2789c412e40d13abf70f8fa03a83\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:09 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=18597\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 225;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F0BQo80cD6RTZzPo06wmqJPXZKtwLvhqc6oKgjm444BbWxbCL3cSvMwNu7Di0rCt0CDolcjY7tcVxUIEa6dvgWPxzlXkw1mJRh1AIFZAkVH5VOl0N4HNHzYPggRItgpbPwe11RF34jW0\"}]}\r\nage: 5632\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429264b1b56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7248,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69499c351038706c5e6b6339c8d82d28","sha1":"e91eb8619f129af58b52d4fb995d54459e5ffafb","sha256":"07af823c553b00bedb3d83d491f15d8137f32cf9f042235c59d0b9c7227a430a","sha512":"584a1efaf0938bc1eb2b9bed83ec28a70ed1447392a543457ba00d5c244de89dfc1f85914c1054379fcd014130ea9d464a1e5ab7d0b5079ec7b8b241c8e468de","ssdeep":"192:lquvZ4KqASSZOw/yyui+0QAIEDvh4wDOwuyaH5C4:lTxfqpa+VhaiwDOxH5C4","tlshash":"dfe19e4d538a63b36cff7207693d06ed6022ebc7809629a2c11151f5e9723e03a3987b","first_seen":"2026-04-22T21:52:39.951667Z","last_seen":"2026-08-10T03:45:15.736465Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon_get/2.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon_get/2.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15154\r\naccept-ranges: bytes\r\netag: \"fba70dec27976b3ed0b7bcfe03f736dd\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:27 GMT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=22663\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EdvEEFGpfda0l%2BCVd0Xjnv%2Btoiz9S10vgNQMCjdlDMrVwnVCJJTUMEQnbP0gK1%2Fk6G%2BEPTOtWiwK7yqshIz%2FI%2FvR97sCK%2FUnwS03XgON28TKfB45MWnIVOo5wNtcAWUnRrBtkXs%2F25Nd\"}]}\r\nage: 4439\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a074292abcc256b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15154,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd74389343e0017d82cc49ef5e73ed8a","sha1":"24a3a635b5b730aa9e0d6f0448e93262f4e66c9b","sha256":"3a3bf47b2d8a92c39a0419eac57acade753b1ce3992df14c7edfef01f1c5783d","sha512":"e97689612aea336e67740914b5b78393246618db354534ef169bca1f94198f21f24dae56bc4a7c3c58845954ab990ec3e082d0688b0eb1c0c883c7b07ca4c646","ssdeep":"384:+kYCHetv0JmJQsU8pnX3RsMJRmlVlfJVh6QmBywQ:+tAU0JmCsU8pBsMJRmRfJ7sXQ","tlshash":"cd62d0397eb8999cb3cea29313772e8045eacc3912c5b668639fcd10307f66543606db","first_seen":"2026-06-06T03:00:25.286531Z","last_seen":"2026-08-10T03:45:16.25183Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_32.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_32.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714765$j56$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=4089\r\ncf-ray: a07429331d3eb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-ff9\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Te%2Br5Ppe%2Bs82f0bPZrRtIAz9BDAq6Puaonn%2BMfx9oOrg2G6OYWcQ53RMh9nx3pFOSeyHfD35hrddEZyFWHG5zYIMLiZw5J3%2BX2wnidaXVaqAZ8wALuI%2F5bH6Nld5aF0%2FD2wsAQ65x10ig0La\"}]}\r\ncontent-length: 3016\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3016,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dd7c4130af290ebae80ac7a191477315","sha1":"f67fe376a534a9ea2d37e1dd02bc02b20f1ef083","sha256":"06f8e1325940866558cf463a0dab7577d46cd5d0e11c897fa98ed61510cff237","sha512":"ff25ad01627a40e551436bfd75ac9114b81b9c319e77f4f2711afa43b3dabf23765822f7c3a06bc3a92659de821d91734794b800b6dd84a5106ec9ce6ab2f9f7","ssdeep":"","tlshash":"1a514ad92dccea0002b8ddaef04771532bfb13bc699993f4124c743661a6ae41cb9c19","first_seen":"2026-04-22T21:52:39.542437Z","last_seen":"2026-06-06T03:00:25.541867Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_35.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_35.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=83233\r\ncf-ray: a074292d4ca6b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 254997\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-14521\"\r\nexpires: Fri, 03 Jul 2026 04:09:25 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Paqv1XfrOhhmIkaQU2RpFn7Aw8QVSXQlvlJaV2%2BdgiXLg4pES%2BWaSTp2LyKEpmifzTrOTFjcmOMaWBFrYT6QzLKJRjsrSsBrctCviYSDwKQQUju2LaOoIsOpTYpEXsrPpLBumPu%2Ba8OIcqqD\"}]}\r\ncontent-length: 72668\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72668,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2197d34fc128ca4536a6383c2ff677f2","sha1":"9de19ee94e2a48d34c43537fc6dcb092524c3381","sha256":"aedeb0159016aa02943f2bea81f2dab12437301f3452f59b1d9244420a316ba0","sha512":"6af88bba54c886c8d193696772e4b63dcb6283d37546ce08dd67dc144f24013569a0d9a1a4863785d0d3ca53638e05b55501af9af78ae3c5fd4986b2c77fdc96","ssdeep":"1536:AjB5PmUpH5nrEkneAIwwD7hcF0onrkyW709MOhZcErnVk:AlUSeY69cFvZXMOhZTr2","tlshash":"2f63021de4a794fa9338d307f88dd24e98e3de8a1c377194b5739ce6026d434a8166cd","first_seen":"2026-06-06T03:00:25.318127Z","last_seen":"2026-06-06T03:00:25.542651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_4.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_4.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=69078\r\ncf-ray: a074292ffcf0b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10dd6\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1nJIAbzbraNLpt4O2O7OyOnHM9cOo1%2FfZWkkAioExVoW9mSetJXhYzZQe4sUOdlhy%2FDZ0SBwh%2FT0x0IZxQU2B7XBvvBo0GTPg01NqtGmO7Ld585NzgBR3bVAhvirRehvkJpC9PUPqkgwdFX\"}]}\r\ncontent-length: 60236\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0c5f6511c58cd3eff6b1bf70189d95b6","sha1":"9ad05a65e857c2276b06edf12866ef455f2e942a","sha256":"3f63a2d9e41375cc09ba06577c67a56fb980f80bf4a1ee0fa4ef98c9e2caa6f8","sha512":"602f06baad4ebb192121255e94e42debf98d1f1807f14d6895bfdc1f97b800a5868dae1a97986e874ccb0057753f0aefd38747fabc9e0a7756a5aac15ef555c2","ssdeep":"1536:4lSdXuotsFbXFnY9l2SYynx92c9um6DVSRUI6kBekEfH:4M+oOFb298lynxkcsm6hSRUGBevH","tlshash":"014302ebeb66f20659432e3f4d6e3946f28c311ca7e25321c122b59f0865f987c052e7","first_seen":"2026-06-06T03:00:25.080582Z","last_seen":"2026-06-06T03:00:25.543508Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/Gamelist/game_tags","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/Gamelist/game_tags HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,content-type,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5879\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-ZoA0bZn3mC5MmYgZ066bT3' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a7b787130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bTlhtfP4pNuuFztXDueRwO%2BrBPIJUrsWqjK9G7v2HG4QlJIiwbKY1%2BOd1WWA6tAbHpHN6s9JbTpEU5LobvHg4OW1gS747h2Vfr%2FlTzt5W%2BZXmmyZwVBglgtjcenZcRtKdhZA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a7b787130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_7.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_7.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=45887\r\ncf-ray: a074292c9c90b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-b33f\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ohAA%2Bdbb80psGCjRaBr3XZigWntvWVKiAUTV89VBH8TPmAWLOp1pj5CDblCEthjS1bp9vU%2FtSqZQat1oQSmCwfQsO5RXn9XF5Qj91N54lxSNo%2FTTwCWKynbORrQOnPCZoGGHJckGTOQxSMwj\"}]}\r\ncontent-length: 39262\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60da509073b402a319ef1ae67b07a4cd","sha1":"faaceb175af1052edb630b6f68e0eb3bd2f7f941","sha256":"a23599ecf86aa8475c6f30dc546e5d805a4707f4d685920f097e6421ef00cb3a","sha512":"8b052edac632a6943cecca7b85cceea1a3f380d2dbf2f255ede88d414b66abd3254a6c296e4f5b4e9a3ae1ae342946e4eb8b4ccbff720028c60d77751189d26d","ssdeep":"768:O0zvrZgXy+YGcf9K3ShM8JZJVHpgDN/XCZ9Bt0MlTd7qxYpWAM0q:9zvrOC+Gfc3otJZE/CZ9kOuOhrq","tlshash":"db03f16a464ac335e1e880f7d3cb5e96f39b5018ac68c72866340d5ac99d1efc05a29e","first_seen":"2026-06-06T03:00:25.097535Z","last_seen":"2026-06-06T03:00:25.544373Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_3.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_3.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1857\r\ncf-ray: a074292d6caab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-741\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufEhIlsIwX4Rg3xG%2FriYigU4Vvgo%2B%2BoJ1AH8BortfOhW2l3TifCW%2FoDjTJvjtRjg9oKJwULrf8DIPSYjPyLyMg6jtFoZIBvfmn0LRYP6PVQXusdXdYzBlYIvMwpOu3wku1ZrP2mbaZFDrEsn\"}]}\r\ncontent-length: 1596\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9f983623f4f8d7aaa1ab4d2b19a1f60","sha1":"07de07b56eb375a212162e7f49cd6c86786a6615","sha256":"aaafc3cfea28adb83eececc38c74433b2e158af334bdfd04e38bbe9980e9478f","sha512":"5d4478f59ac4753bca8e4f2bce9eb4752f29835e01c3ef5abe9ef47c8ea6605b9c4e5df08df0fbeca92b486c2f6d6226f415de76887b201ff1ff8086809417c0","ssdeep":"","tlshash":"d2310c1e16743bd9fa4c1eb8575327bc606811b27604263971524c43b2eb855d48b255","first_seen":"2026-04-22T21:52:39.98651Z","last_seen":"2026-06-06T03:00:25.545226Z","times_seen":6,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_4.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_4.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=31970\r\ncf-ray: a0742930cd0db517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-7ce2\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ftlBrGJNPnoZJSglnUP23fVVb6eEyD4C0ckgcL%2BU0LHT62GH%2FMaS1VuDygkRI0vBMv803VnxnivO4T9k9XqGtDOtraPGKMhK0MWYV5YsrEyxPJWLS%2B5fPx5JdJttUDUzWtEC0jVbDVxQXW%2Fm\"}]}\r\ncontent-length: 26034\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1f61ea37124f27cd60fe10b85861a24","sha1":"4527d8d525e79ee81bac6b413ad1c54f15d3c10c","sha256":"0d5250e7ba0a3f5058d09facc65ef7c81cfed5e34c21b7d496f817856385d296","sha512":"e2a302c82ca0298f61f325366a6b40d9de3d81048edde0b5dc3920556a52907f3eff8a7070a56883f6271629f7081f66a9444b066c90e521a033cbdd900a2c0f","ssdeep":"768:KYxU4Nbz8Oo5TkDpDi781pDjkTFPVJ1hZ5x7:K2Nbz8hJs1F8FdJ3Z5p","tlshash":"a9c2e0526e03486f75c8feec6dc3f5fe3e088ac0818458f90bc16a1a641b8ea147f81d","first_seen":"2026-06-06T03:00:25.444283Z","last_seen":"2026-06-06T03:00:25.546087Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_25.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_25.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=13319\r\ncf-ray: a07429322d31b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-3407\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aj8a97WgmNYn3bOrzzNmT34fDQezXnxPEwIBx6L7R2PhYJydWKIUdm34r4ICoKpH6fbRyPs%2B%2FLYYL%2BOGmByYO2D149kbJTlz5k9OQcQo0nPMv5sSMQIN8e3yfidO3m0xRY94jCEwBtQPirvh\"}]}\r\ncontent-length: 10552\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8854f10778bccf8ae42acdbb4c05a8bb","sha1":"93056d58fab2446d032ee9165b23ac34f91268d7","sha256":"155bea0fad9b1f86395d13e997a3223bc497afa2a17985573d57b221bb57068b","sha512":"df45dda77d94a5fff4acf95227a42348ca799637e380c487dd92c23f3413312df776f191a7c78af76ea1b83999fcf90d526b6db07508693046ddb0708bb5d919","ssdeep":"192:sEzJQqOmQ2Y4FhlhmL03YBf1D4m14vjbhgDL44q3gDfPJclxbK30iFUqoKjY:9PQQFhPmZTMfgfGZxKkEzY","tlshash":"c422bf63de6d5fb7c35838ea7f56718b17a2471679b0664483088defe603ae11b44504","first_seen":"2026-06-06T03:00:25.394573Z","last_seen":"2026-06-06T03:00:25.546909Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/gif/mini/gif_5.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/gif/mini/gif_5.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8246\r\naccept-ranges: bytes\r\netag: \"f4a29d7be1b815616dec37ebc3a91b75\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:18 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PP0hzZG6CQyUeU3i3oSJWEqUY6hSXLct6749%2FHFa%2BwDB34YP%2BRQVb%2BSuA%2FPRw0nQNBz7kprKtIPZ7EXyjEXRCTM%2FJgmB3Rlo6r8z%2FewPCww9bQG4pXLsjObHArhdruA4gClE0iYPFSkv\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=10509\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4428\r\ncache-control: max-age=14400\r\ncf-ray: a07429262b0056b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d6c8b02719311f87d1dcc74a668cfc8","sha1":"24c39094964dd3c7f0c372bac4a11978be0fc5f0","sha256":"3b425333f953a69afdc13d718cf813a832e8c3b69dbf98778aad2ba10272bcbe","sha512":"e37ea2cc4f157ac37e02d89c41117f8b305a8061607c6c63ee7b9bc923964145792f05f8509a33dc8b5eaa32afa866d40b344f2acda763a9d06066deb6cb5521","ssdeep":"192:x8F1b5RNAOtLWf1EiznnkHN2WS+G5bieWB2:SJPptO1rkgIUbieWB2","tlshash":"8b02b03e59dac811cf7cb9b9c284446c595e58139a1c7358dab4e676b63c4f5a00421d","first_seen":"2026-04-22T21:52:39.863451Z","last_seen":"2026-06-06T03:00:25.550592Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/user.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/user.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 368\r\naccept-ranges: bytes\r\netag: \"02c165231039dca01b3d9b0a29b86892\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:11 GMT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=759\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUdnW00Lp9GLCITznBBsulXn%2BTvVm4Z36gX5h12Xr597EpzX0YQdIBiwWb4YJ9jh8HQ%2Fsdfn%2BhWqA10N3bd0JNt6Qz3SXvCWy8iv4kBDZGX3ZNg8vokDFHWREkqwOCUwYgSOeGH8xSzF\"}]}\r\nage: 1833\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429289bff56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fcafcba447d681c009149c639aa32a2e","sha1":"de39c795df564089ca4625bca503a3641c2b84a4","sha256":"93a0edcc2a1f0af9b25f2369784e8557db3a944a230845f6d7d49228d1cce0ea","sha512":"038ff48f4787f22cd960cc3928305bc323ce549b0fed61792cd0817b50b01eb6734a3abaf0d0b6e1d4c3d244b07029ea8460093f1e14b1f13f19cb2f3ad8cee4","ssdeep":"","tlshash":"5ee06ab7d6d106043c403cf36f30160b464c0134fd1cc60b515a1ec3262dc11f534e44","first_seen":"2026-04-22T21:52:39.522518Z","last_seen":"2026-06-06T03:00:25.549305Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_12.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_12.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=80491\r\ncf-ray: a074292adc70b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-13a6b\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUbYqeQtgO1guuWH2odOnbLnI5lx3NZfyOltZ3UYLlbOfgYkOYGSAo3Khka4crj9yQ01fgdJ7C36TvdzconLEUv2Uqp4A1PtbO2WQ4ULvg%2F9qUCX48E%2FFqnro68dcgkHZwbXS5I9IeFA%2BfhH\"}]}\r\ncontent-length: 69676\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69676,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"04a4ba5540edd855c5c76de4a22c2ec9","sha1":"641b1591fcee3ff476c1e56fa7957866338f8e9d","sha256":"c90550177c36844b4a99a3de7359fcd72455ff3bb705adb0238997c00ebf16cf","sha512":"a928644aa52cef8aa95399a3a516b1f0c8af4a345334065199f097cae257aa29221269b802f263e09b9827925baf55319948d5a746a3a7295d6fc9675b4e738f","ssdeep":"1536:A8d5kcm2Z2qxCXVFU5g1muGC1iNYwu9CBFYqLgQlRxFavMJ:AG5l2qQFFUGG1Yb9JIgQS4","tlshash":"ac6302b3d9104706bfeb381b1c9305e77a51e79bdd2967938611ef282a2821fe3d4486","first_seen":"2026-06-06T03:00:25.513732Z","last_seen":"2026-06-06T03:00:25.549957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/Gamelist/index_game_vendors","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/Gamelist/index_game_vendors HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5906\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-g1Mi4KBx85C9xkGXIU2WSk' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292b1bad7130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ZYWeXcTSeI9i%2FiniqpVeUBEnJFTJR3LMf1eZ8i5Bd4oskHvjLEcw9DVWrLuDeJu%2F01eAhWKQzRBWRqV0VDMVGfFQDetdG2XPVh9wqIcjhV6ElX4sQpbHaCJ58n4UgAk2o99\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292b1bad7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_24.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_24.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1996\r\ncf-ray: a074292f3cd8b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 149\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-7cc\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aw7UlWqZgKwOgQFrGya%2BDnJPW8wf8HHq%2FsQ%2FbcG3I43Fabl89whXUdh6UYrrimc3Sk1bx1R8tFNJHdc06%2BDZONf2eTBByy2cSEnxeYoOPU7GEmgGm%2F93%2BXP3yrCfwDQyDnvR0LGwHTqSV9bo\"}]}\r\ncontent-length: 1732\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1732,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2aebac16e5dbabe48890128b657570ba","sha1":"1b8c648c3ac51d59394522c5ad8832276c2e139b","sha256":"bc9d1d3c8277934bc9275d09c1f5683c8b869ab8cde41ee5cbc9d1c6e695c6ca","sha512":"c57b2acc3e9691d1ff697136475c35c532cc5c5673259e03821d6f62a9506cda3fb35b018ad5976eb733b97c73c4ac4ec52fb35b3ecd061dc6192b7580718853","ssdeep":"","tlshash":"58314dd51539387145bbd24f1d73e60f2a5210a9f662a10ed9d03ed092e084f1cbdfc1","first_seen":"2026-04-22T21:52:39.762735Z","last_seen":"2026-06-06T03:00:25.55098Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_10.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_10.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=66105\r\ncf-ray: a07429316d1cb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10239\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WkzVXfW%2BU855xApcAuhUECx2AT%2F%2FCmAWh%2FtjHuybZFXVF7dK8hsBsZiLNWxCAx%2B%2BiTYA6vnlLSm69GqNO%2FN8HSGh98RVaQau%2FXTzDVVoZRtI18q4lwEW%2Fvkw3FcuGdH0epeZiqNiplg3TR9p\"}]}\r\ncontent-length: 57752\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57752,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d620a7e2fdf605731916377c25739ec5","sha1":"a50d0c8a5ba589a4d038cae41acbcd3e2df91e84","sha256":"3aee0be6d72909e1adb4da4f9535085ec98418488d44a316f08fa7478f393f22","sha512":"4ce7eb3861888972ad0ee9a8393fcf454e33d5f8f483fa5418890af684266a1020238cc3390db506c05510673e44afd8a4814711c527e991a389a91813ab48ff","ssdeep":"1536:nk4fMeIxRPuoDHZcWpTI89lDpKty4bBczKxhBfovYwxDiOaTxOM:3U7hJXpTI8Yy4baKbBWYwNi/NOM","tlshash":"1243f2189b4236bfc6601c5f69b8e2dde74f2526b3620fa1406af142d2e71eb4f5f091","first_seen":"2026-06-06T03:00:25.196817Z","last_seen":"2026-06-06T03:00:25.551723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/gif/carnival_es.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:22.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/gif/carnival_es.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2870\r\naccept-ranges: bytes\r\netag: \"1199aa4e942cc29890c794a0419f0f66\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:07 GMT\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=8040\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MSwaNpqfkzsu7CKAQy5essl%2F3Kq8k6BIs%2FubWryDynvxeULGZm4ZVc%2FjzU9b5TvMfW0ztnRd5ewTPns2abfzgFndQni0lAXckK2sd6EUksfr5wSQSpuZkfhSzQVL21cr5tVe2jW1fE76\"}]}\r\nage: 5827\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742923ba3656b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2870,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b20c7c9b3b6184759855f5ee46f0553b","sha1":"a2b4cdec088663dc0447852a4ef3304212bd4656","sha256":"698c894a94c999c8bc74aa13b7f6123dbb9361ae91552628d2d4bcf737783321","sha512":"536be34b8542ee501adc761b017ae4e6b3740f2d554401df30c6882bee500dc73278814d0d8f82c6e8504991e893d5b424903b7ae8ba0ffb454c9184422b8b5f","ssdeep":"","tlshash":"d5516de026d6b220546ce9a99aec070515f20012f2827eb9c9492e5a792dac0e48735b","first_seen":"2026-04-22T21:52:39.517766Z","last_seen":"2026-06-06T03:00:25.552939Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/common/media/facebook.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/common/media/facebook.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 932\r\naccept-ranges: bytes\r\netag: \"fe42b9e0a47c2ec6342a0b1c0c678508\"\r\nlast-modified: Thu, 13 Nov 2025 04:17:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=46cOuM2c0UTeJowbS%2BaLPe4GXNndWs%2BQGbEBngygGIkx6JJRCKUiGuMZYQ7Kauw3Ydapn4MKPOPZ5KJBtPS9lMu4vclB2Axq543kNF9zeRCicUNRs4l6JPRf9DHzS48j9Iqdi9Pm7X6j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=4276\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(118;u=5;i=?0)\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4428\r\ncache-control: max-age=14400\r\ncf-ray: a07429265b1e56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":932,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ed3a567dc1f7c1d910dde7298210a31","sha1":"8ff9141d03eaf9ff53476a0069ac51cf26432de0","sha256":"ade52122271b92b35b15e759b919cc063795833ccc233023943c526ea97fe043","sha512":"207c38ddbabd79cca7a7a31bb632ede90f00fa8ed8259dae26201f690d81979f651a184e6cce114dea31db0c4814aa90483145b8bc4a61dce06476e410991c86","ssdeep":"","tlshash":"cf1184cdae93127fa1571afc453d0bb382182e690121193919b9ddcb9a702313eda341","first_seen":"2026-04-22T21:52:39.76629Z","last_seen":"2026-08-10T03:45:16.35571Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/wish_wool/gift.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/wish_wool/gift.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5310\r\naccept-ranges: bytes\r\netag: \"cb7decd661f068c364cfe8510f82f5f3\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:52 GMT\r\nserver: cloudflare\r\ncf-polished: ok, orig_size=8445\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pNiCZIPaJMN%2FXx4enZOvjvvKROElK39wTSUyCMU4TIqMppZleam0aUjt2Irdr%2BfGo85UF69cofxXGLYSHK%2B6Nq%2FPvyRrPGse%2BelYSPYuksvGv5xAXq%2Bz1VWWkXhipL1dRFi7irPJGPr\"}]}\r\nage: 1730\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429278b8956b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ee7103c7d1ca55c125b7b17d6599b42","sha1":"b1970011f3e61a80254af00eb183f3624bc045c0","sha256":"99222930aefd9923e3c9f00d6b21d97f6eb2c343cac5f5074be10485c53a61e9","sha512":"d7b8d054857211879e87a5ff421bd610e38125c144944a28537baee111c1f7953a7ed925b1f90d6cbb97f05dcb53db0a1067acf92c9d8a96a29cbd9563955c53","ssdeep":"96:BgrRpaugOs4RNoV9jXBkw3UQ2TQueuEeuhHQz9dIUtw:BgrRpavl4RmV9V9UEunENuzg","tlshash":"71b19e24bd64907d2bfbe793c1e217087c8c520f864b64af231e4e649959c0c6bcdc35","first_seen":"2026-06-06T03:00:25.05532Z","last_seen":"2026-08-10T03:45:15.781335Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/common/get_activity_advert","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/common/get_activity_advert HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5903\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-NRZRAq0HNuIoOi2Pv0IEOk' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292b1bb27130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uOmBj2fOwQXdVxdvAO%2BwDHbEf6XZHkfm0JwhX2cIx02FBSnu69rFBStIZIeRj7MIBvmDO%2BJB%2BOVMrq1EVDhihrgT%2B7%2FB4n0r3ZSwfclo26RuNf3JqqI7cJET0j6EMUoZpM0o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292b1bb27130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_20.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_20.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1888\r\ncf-ray: a074292e7cc7b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-760\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fYGZGaVnjYrmVLYXIwKs7Pme0%2BgbqD%2BMSaQcq%2F%2BbECCu%2BX%2B%2BevAShFwF9uxKkpGjetgyliDVVnyeerWogR3aG0%2FO2TY1nIowwIw%2Fpte8FWSkOFkUKKOjEuh%2BdATujr4c3lZOgoK%2B%2Fed4kTdx\"}]}\r\ncontent-length: 1638\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1638,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"febc3d66b4c7f45c4ab90993e7b79578","sha1":"70633a8d0e1ce0b77fe660643fe5bfe650d90baf","sha256":"9ab621818a670adcd5848f067e922d847978462149d39d48ec768589f936f03a","sha512":"b6ee822f6a7c493cb13042df9bfc382bedfb727e4f57a0af4b31f77acf229aa2235472ccfd76a7911bfd46be7d2d8e839db4e9ec091735e541b0c2b6e1fee1e3","ssdeep":"","tlshash":"c731c8d882e1f21a710a70130752ba26bcb80ddf4fd537f516d20a3e34ac8de495f090","first_seen":"2026-04-22T21:52:39.772036Z","last_seen":"2026-06-06T03:00:25.555352Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_8.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_8.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=68614\r\ncf-ray: a074292f3cdab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10c06\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F5M5iajJS5RrH2qt7QebcRFhAm4NpvLdRDa0hYTfL9VPDMVi2ms3zToE5xcjTz%2FBOAXVMww3e7WQ8Bxr0W1N3Uh%2FEI5ZWsFcy%2FHEVengpUQspV1Q7YfT1h5lO4dOiuHc%2B17fE6bpPDpXYcXg\"}]}\r\ncontent-length: 59370\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59370,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f6e109915f09d4787e75a640e7ca87f","sha1":"d4e904a2d8576c70d4386a97ca94d3e79848f912","sha256":"ca0c8fb8dd665397fc47e53403986388d5f4ce14a1108dee281d823ff6b47574","sha512":"da77c1f4dbe52d21c82d341a09b0623b44f1578019ba92ec85cebd4a67a09659cf2aa827b17f79ce1d4eb28700232e327ca9571cac0978fde6fe346173fc475a","ssdeep":"1536:wfhohzl3ekKMxZOtrGTWzsQQNliBMIwbJZwVIlBoFozp:Lb+MDONzsQmv9bJSp0","tlshash":"ef4302fd508bcfd24e19492f1709e7196db7cb4bb662007a8506e48eaf3d99cd283122","first_seen":"2026-06-06T03:00:25.456446Z","last_seen":"2026-06-06T03:00:25.556058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_13.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_13.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=65281\r\ncf-ray: a07429320d26b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 145\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-ff01\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8xLHy%2FDmGB2TL0gtg%2FaVcBASyvlYLl%2BSBLt7R8x8Z5pJaQYIF3wHFs%2FI7Y4kiqxyl59Vjg095O4e%2FXjZ4L%2BwnqMAnhBrDUl7miQ%2FkBj%2FdjDeV%2Bhd5EWh8gGqCRoNg5ZEsee5dfEq%2Bk0scMcG\"}]}\r\ncontent-length: 56526\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebb816f657d36e95aa0492d39f019a3d","sha1":"726b738742defd0c2bc8165efe5dfe2359d0b971","sha256":"24cea26828fe12ce532ce502412a1b9e914718eed249e874a3338139c67c43ef","sha512":"cf8af76754fabcc970e265e56074c9b838a0ff2cf592869f731babce3a2f7a28659387e91aaff9a538b3777072c701714da5b0fd737886236a7ee8b9a59e1fda","ssdeep":"768:B9kQmEvk5tfuH531PcUyI7kJO6DUoqp9rSrE9EfApda1YPA7lib5WcQgq1l0wVK:Xw5t6FJVdb+UoKrSrE9S94bb5WcE15VK","tlshash":"f643022d82c3b204c48cabd86dcbb192edd95116fe23c0c720d7ed5c5a69ca4ad19b97","first_seen":"2026-06-06T03:00:25.390282Z","last_seen":"2026-06-06T03:00:25.557296Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_1.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_1.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5359\r\ncf-ray: a0742927fc5fb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 154\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-14ef\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKcSAOpHB9XwLjB%2FAdaA16QVm2h35IOIzS7EFcEUITMmgrpCOqAhekYTdSdbklL45Zznq3SzqpohVDQ26qDyX%2FXE%2Bbsdl%2BjlYLqMotSW%2BzHqn6qlJuk5SuyDf9%2BVK0PsI9GX99kVPBMptln1\"}]}\r\ncontent-length: 4494\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a27527900b58dc0d7990750dabf1ed51","sha1":"a7629dea07ec856723e3235feb6a7d85b90ff145","sha256":"aadae53e938f6eb2c67f79b5622f1c131b39cc1dc6c64c6a1d15dfd37c7d8261","sha512":"d69a476e519b1b1c342609e62d6307c22415b19d4990e58b60cebc2e5ec92a79dadf85449eff78d42adc5a956649e1d9ef8e03f781af992b2f799ec54f5bedc2","ssdeep":"96:/YyE5dBZKnjRPBN4Lj9MRXrLbsLFWfvTLFRjy9AI/7hwC8w8FJ9FrEv:ARVWbNSjOR1XTfjy1wJwO1Ev","tlshash":"81918fe11650f664ee9f5e2aefaa5126fcc85fc503fe3902c2e7045255d45fd0344902","first_seen":"2026-04-22T21:52:39.759059Z","last_seen":"2026-06-06T03:00:25.558218Z","times_seen":6,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/home/nav_bottom2/1.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/home/nav_bottom2/1.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 886\r\netag: \"deb8c9e86e6afa5e3fe2043605b8967f\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=2457\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FeGAn%2BB%2Bc2TKExv9IrBRgdf9uviVMGOk5XIDieCKXLi30d6Rl0%2Fg88O0NEt9T9ZX7BjE5FXOc2P5L9Kkv5RRqJUXXF4jmWY99GFK7DsZe83vfNfdqalwBL0YlIuczrrqjJYjORqrM50\"}]}\r\nvary: accept, accept-encoding\r\nage: 4429\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429265b2356b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e16039f06440dddbdc54113c285cf600","sha1":"3768ce0e59f6d4168ab156086bcd7cf34836acf4","sha256":"2a1e10c92cf76795cf29a48ded69c9d5c65a01e985562f0c99ab0dcc4a18b8e5","sha512":"1617bda8e08db2aff09992eb56367f3b0bdc2145824e92bad96a21421a1eada09662210ea5c51aff63408cbd74d31d63f3641654179254e686e56a520d7d3a46","ssdeep":"","tlshash":"0c11b7254e1463b66d3930a9c790829391275016bca7dcb5c9349f38641c54d3467387","first_seen":"2026-04-22T21:52:39.730914Z","last_seen":"2026-06-06T03:00:25.55975Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/invitee_reward_popup/reward_bg.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/invitee_reward_popup/reward_bg.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1566\r\naccept-ranges: bytes\r\netag: \"043b0614327c41c906f030e82a2d94e4\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:19 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rvrm1gvF8BczVv%2Fgfvx%2FBaMBHH1NeuJCXPsc7HGbhPtOkICgvy4W6nR5l%2FNu%2F7nfH9G%2BdkBehfHZf3aSJ69YuvnuWtVUvXQZm62%2BnYsZP%2BAQ0QeXELL80jZ1ZdrOkWzBo1ikQruLMWZE\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=3889\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4248\r\ncache-control: max-age=14400\r\ncf-ray: a07429279b8e56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1566,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae106b3865cc76dc25815997ece0114f","sha1":"af63b96c95948d24fe2924aadde7c78d20909670","sha256":"fa4397ec018a93d3594777bc599061bbabb8770294ffd80b5555c7d6380e7165","sha512":"672d1ad1c2eb07194f800b4502b225546bf81064c8aca598d322a55664ae8ae25450518d900fa3f188bacc5a6c43aa1ca7b36bfcbf7b5d4049cb7aeef2e371c4","ssdeep":"","tlshash":"46310a69c743e36f9de02660995e15e7e1407bfc0c8dc3485da2a3edc555e6726307d0","first_seen":"2026-04-22T21:52:39.74847Z","last_seen":"2026-08-10T03:45:16.062316Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_11.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_11.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=39533\r\ncf-ray: a074292cac95b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-9a6d\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F7UvKzUi0MZcudHC9dap%2BjbHqAP4CfEbBGzkmZ27nencqotGc3e%2BY9EaGhL9ueprMp3rmjpGN8o8xCToc9jmCnnbxopwckoFrsvcL9ZjL36SmKITZwp43nZMHuhidPAIT46c2rUkKaH0CgzY\"}]}\r\ncontent-length: 34412\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"915ef3793157d2159dd060e40c714932","sha1":"48b596ccdaae5e00ca6dfb7227168bfe050bfae2","sha256":"bb1f326ea3574901e0aa713e6744182964391b39c711e7543676843ce31f5ab8","sha512":"da71b64563770439506ea74105699f9de134d7e860c8491f8bdb92c5c5a0b99a2df00f8b93362f891187eb51c3f897b1fc5b5043d08bf0dba7edaebf4df6dc04","ssdeep":"768:OiFnzKTgCvwJneFRtq6uMe/7esRj64jB9GIY:OiV0gCv8eZVuz7eu7NDY","tlshash":"f4f2f1fc999cd0fb4a4afb744f40bafd495bd1530e2ee518baf9b4809213630cb91092","first_seen":"2026-06-06T03:00:25.315229Z","last_seen":"2026-06-06T03:00:25.561529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_18.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_18.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=17197\r\ncf-ray: a07429322d29b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-432d\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8JOdITVtivBTTaSKTOLXqPmf%2FaQ6OxfUAJIw3r%2BT%2FbM%2FzL2khpgUkjcRNS7ydi6J8EbcBGSky2TLhlo%2BGmJYODn9ou4hBLrYvolyidvyB%2BmoyG9ZJo7fs2bUSQrE1jqX1oodbmwtoTOqeXQA\"}]}\r\ncontent-length: 14200\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"89670f79fcf7ad06c9a7b32cb24cbe95","sha1":"352a107676082d0fdadc249ca7f8eb78db7dc837","sha256":"a5b7a457ed6b24af2b301c0cec74969d3c0aa8407bfc4249015a5fdd562929ff","sha512":"979e15edf38195c2c0d321b4823254cb15c754b6cbf015e68c3527a9e3246b174bdb6e1fe7742776e64a62ae829386d9369fd6eceec98f3789ca73a332ee845d","ssdeep":"384:ES/7X/cxIiSYvkkaoZyPrPaiSDLbKJx1TbWhtHHkaq+Mn4F:ES/7X/+p/ZSV2LbqdahtHHt+n4F","tlshash":"9d52c09f702ee9582f4f64a8086b8e9174511091d2433ff26a832e8791a5363779bf7c","first_seen":"2026-06-06T03:00:25.123239Z","last_seen":"2026-06-06T03:00:25.562502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_22.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_22.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=17083\r\ncf-ray: a07429322d2db517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-42bb\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yD12IapzNLgLra8j1gHyFvVoDjmfuPQiBWsHVNb%2BsjSUJHUvPipSyvJJGDvUcBQCaPnG9MGj7SHYNdyIww%2BEcDmT%2BpdooXYlyV%2Bct8%2BcyBwJD9R7Pnl0Qb9U9Pfp4WeUn2sjQh0TvZAsoFKG\"}]}\r\ncontent-length: 14246\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e31335901f955801b46149c88ca4fd3b","sha1":"f2dcd392a29c7340df1cfb8ac004ae3ea5739a72","sha256":"faffc4bb71930c67ed863d2771bf4d6909d66dadecde1dd242b104ae6ce3babe","sha512":"a039b972fa197f965edfa0e830d02a47d23ef970765769b2348cf1eb3a119176604dd32ab6b163f2b0a3fb1ac6271c821fea9667e150c3bf526a4a0393c72966","ssdeep":"192:OFu7TKbv9Yb6V1s4fo8kPt+pwmFxoNl1uJRDH7QWSol+auuJDIYD7HDXiNUR:Eu7bKDA9+emFyuRDEQkulD7DXaUR","tlshash":"a552d08ca2ea4277fc5155324c0b0f4037f57fa53d8f81624a915e16faae019b17a7cd","first_seen":"2026-06-06T03:00:25.270621Z","last_seen":"2026-06-06T03:00:25.56356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/launcher_settings","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"34.203.24.55","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:27.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/launcher_settings HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 362\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":362,"data":"app_id=lth8spdw\u0026v=3\u0026g=ce7cc7ab8333ba9e81fd82a5d3d51f3b7d658d40\u0026s=f1295292-7636-4de0-9eb5-f3530c876020\u0026r=\u0026platform=web\u0026installation_type=npm-package\u0026installation_version=undefined\u0026Idempotency-Key=b382fb6e7bcc940c\u0026internal=\u0026is_intersection_booted=false\u0026page_title=casloco\u0026user_active_company_id=undefined\u0026user_data=%7B%7D\u0026referer=https%3A%2F%2Fcasinogalabet.com%2F"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept-Encoding, Accept\r\nx-intercom-version: d71bf3b48862b3e271f066992bb3cffe3c29f2f8\r\naccess-control-expose-headers: x-request-id, x-runtime\r\nx-request-id: 000q9t6g3khcsf00ndqg\r\netag: W/\"16aa4e6dcd2e4134c965ebadd1f9dfbf\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://casinogalabet.com\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.038124\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-055bba15981b47089\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dd0a15a2fce1bbd162e421c17864b03a","sha1":"daf598eb662638cfb7aced99bfad58012ae735c9","sha256":"16aa4e6dcd2e4134c965ebadd1f9dfbfb7d9b1d7343e3e03dce397deb8f00f29","sha512":"5109876f3529cebd049721d9582d4ef7b29a143c04f28bac034ca755bf420a115525d4dd921232ae611c19fa327c8b32b0746eb57f45a349a959a124327bca7c","ssdeep":"","tlshash":"fee0ab5c7b9c543a1586879ec118ed1203db35ebf2481d74f4949a1c60eea841643907","first_seen":"2026-06-06T03:00:25.350664Z","last_seen":"2026-06-06T03:00:25.564443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":193,"dns":1,"connect":93,"send":0,"wait":134,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_13.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_13.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=79584\r\ncf-ray: a074292adc71b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-136e0\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j1exadASV%2BoGhFivovpNTSN15lJtyv6MTs06OY84oRNqXa6m4rTXxz0ARxE5Yc20elMoS1VDIXGuM28DkKBCiOUItuNhvDUPh%2BXUd5w29wu6e7Tcq5aXj2KIPMovTcUNfuY2IiG4izjiRXmz\"}]}\r\ncontent-length: 69314\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69314,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"af1c9170498f6eb20ee812ffcf9c38ab","sha1":"cc38a552107e8ce5cacbb1c4a5f1102923c878b9","sha256":"86ebbc664f4117ebd967f60d9f692ea499004b8911d6bfc042e2b4ae0d54484e","sha512":"3c470d541149cdf208dc1af7c988ae1a3319fc5df98af8c8b20a8bef7b10ebda13438e4c47bb13f5f9e4270bff7d01b9d29d6a0f9819febdac4c18fb355a4788","ssdeep":"1536:/lLGhZ5ZM6bKchcl5aoxJivJNLR7euGQaX9wGm+2Vxl:Na5Z3Kc65aovIT7V/aXiGTWH","tlshash":"51630258369bc0a69a6ec97df4b8f34311dc750d3cacc32a774bca8a65bca50a31740d","first_seen":"2026-06-06T03:00:25.324304Z","last_seen":"2026-06-06T03:00:25.565234Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_23.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_23.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=78387\r\ncf-ray: a074292c7c8ab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 152\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-13233\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V8d2W1ea%2FQDDL6DsdBeKwQm2Q0FpViveHpuJ2oBH5FQPxQF%2FbAgo84UVMQ6aEycnSmSNWsyg94eQgcdKr8mL76%2B3JUbbuKeDIqWIbMmmTgY12LkgUa2%2Fr65NpQWWkSMUUXtqZ22obIFCnvgF\"}]}\r\ncontent-length: 68166\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"918f9baa9e18b178483e19bfb57371fd","sha1":"0040892e8062efd3b4ffbb6609fedb9120f12be5","sha256":"5d8e6e1e54cc2ccc8a4120df34885a3b7e1154d6590fc910c5c1ad37aae6190a","sha512":"27ee0b5fe9636b07d4b391e322e4c71790c10de54dd30a4bec44dcb259c9b9dee44eb734918112543c70a820b9fc6d1776a38da25c703724742e15c48f2f95d7","ssdeep":"1536:gG4H8o1HGonCq4ZHHXPfO3Fe3/ktQEsWrpog0x/+3:gxckHGoQt313FEDdoX+3","tlshash":"f36302f96c64c5613c4afcd151ed2f682ada0bc4a72b9ef76748c2793c190904a8b4df","first_seen":"2026-06-06T03:00:25.382768Z","last_seen":"2026-06-06T03:00:25.566529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_26.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_26.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=79248\r\ncf-ray: a074292c8c8db517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-13590\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j28bgSubj6fhR0ENiNygoWepuJBwdJX9SJubZH3sEelfbuQFAf6hVhQQlduc9bUV8heTFZe82Si5mb%2FDvPjy0JeOVvkYdfixyGJsVnVT6m3EcP9DaXqkU7pusONusoWQfITbN0cXibEX%2FEC9\"}]}\r\ncontent-length: 68624\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68624,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"573783af3faa2daec06845d95610c883","sha1":"2a8f210715d5c45a38c2c71a87b48ef61d3db8b0","sha256":"5db7c335e5d99c4657871517fcb1e4b835ad93ff81f2b3894488e804ef9bfa4e","sha512":"0d090135e3fa57f94d09fb5449be8133516409c6908e182c2343c4824ff6b83b2065f048c4345efd88bd326650dd421910e84942d98a2cdce48f556797efde14","ssdeep":"1536:ZH1vNKtqpSbbTcYrjv/6X5YsGl9HNJEjwZiXdnucPHcj:ZVGqpYbHrSKl9q+","tlshash":"236302d7dbd675bcb0c7aa27a355dcd362664884b8d087b133b8a066f0312d0e6891fd","first_seen":"2026-06-06T03:00:25.300713Z","last_seen":"2026-06-06T03:00:25.567199Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_18.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_18.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1930\r\ncf-ray: a074292e6cc4b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-78a\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MoSPxvxgUNpq4O731FDqgsSov8QdGSKWs%2FcRnKZEB4IJlAJCAOEp4dtHtiQ4wTkvSlEoYbhPeoCu5elQG9LXlREO1IA0gctZ2NyzzT%2BmuuThzo6ftn7hIc%2FEyVs5xHjJqlggPtcsbaqlPBKF\"}]}\r\ncontent-length: 1658\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a3acc691e029f5699421f2fed9093cd","sha1":"e48d47f1e508afca01e37fa1a6e6110d41fb0767","sha256":"66fbd9f5dbe1e8825ecd8641d95b2d6383d4677a120bd619a81d7d596e6dd515","sha512":"dae6e9b633e0a2cbc3cad83232944a05dcd54981a484131fd309e9dc5963f2781d6c343d1d0e8a051bedd34e8576dbc56dfbdc07e9409ee97966877075439c46","ssdeep":"","tlshash":"4531ca8c69ac8504797e5b914631aa5b3f40da1a11d3f04d9e0e149bcccf663924eb9c","first_seen":"2026-04-22T21:52:39.446821Z","last_seen":"2026-06-06T03:00:25.567979Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_6.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_6.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=68896\r\ncf-ray: a07429308cfab517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10d20\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zj0e1M28WpHQLCv2UPAUEcr7rKbLzK1JYqpGOgKZ9IenlbAkQwf94bJMhb7undw1m%2FbXzjSeWmG1lLCpntuoK2anszEq5pcFylJwnbbADDrHG9dh3uMRBYhtfaICsd3zNn97IOTP473IAnuf\"}]}\r\ncontent-length: 59158\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59158,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d94affe672a146e6647792583b761ed0","sha1":"0f1a3cb9320af3d80b68a85ffb4f8d714e5d4192","sha256":"1a5583632cf6efd1aee5d0a62ca51758eeedd1e6d3253d6ee52b087178bcfb77","sha512":"0a5540975df84c59e46e37ba145f053dc2cf78b02e4549a1172d2467ed790a9c62d712f86452c8f4f18f21032e60205e2b10e8173a2296e67ababbf31e01e649","ssdeep":"1536:/z9PNy9JiGEAUOzrnl6BW27UP9UYWoO5UpCctpvCyN:r9PNydEh3W6UPiY/MBoD","tlshash":"c3430224149da5a1ce9f8a58bd3037b9ba75c7b729305a3158b20781cd8cd9a0db7f42","first_seen":"2026-06-06T03:00:25.437808Z","last_seen":"2026-06-06T03:00:25.568738Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_4.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_4.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=70094\r\ncf-ray: a07429314d12b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-111ce\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sd%2FXylZM7rksCxxrMHm%2BFc%2B0f2dQJKByC3fj49u8SsEnoxH71SI3z428auKRxAXhFlF%2F8QGEtNR80fMAzni6MRI6CAl4%2F7dQqFDBGtsX3%2F0rt12xRaPCdBXY8WpSIsLtrM8iOH4dlR41GKzT\"}]}\r\ncontent-length: 61138\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61138,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"04dd403452d34df4a3126ef2c60ab885","sha1":"4e74e9aed0d0becdf1920d3f46cb7c79b58b464d","sha256":"2ee0250d12594ab233048b9f6256acb79c8ab5c5cfe785d5d2f49e683b8e932b","sha512":"40e5e8383c76a7f2c59701e0af7bda6c65083708976f263d76f8e82c96712b2baab46b1f6ab59c1ca02228bc8ef0b2ed84c0f22db348460e36dd1ee32a0e734d","ssdeep":"768:B5MMljHtYdr24BQcsS3mRS+zdA0jmaxCfBFi77LgX+s8FeHupcoQ1zRiodYo:7MMlpYosqdAm7xCf6UXL8oHGcoQ1Mk","tlshash":"5d5302db5edcad569018df8e5d99843e83d18835d2213d3fd993357ac4ecee28d1a202","first_seen":"2026-06-06T03:00:25.081955Z","last_seen":"2026-06-06T03:00:25.569471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/gif/gif_5.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:22.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/gif/gif_5.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57676\r\naccept-ranges: bytes\r\netag: \"686ef5d4ed8e6ebbd40b9dc8320bc126\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:08 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fljvoXO6tfL9lRVbTq4ijtLYYpxOeE8DhYfkV43j2VEtM6YcIlGmLKsBs%2FApGbEaQhj6pyovYZCT2qpF5DbJIDdrdoASPenK6Qfn4P0etw7VHvuK4lbF3RoaO%2FWjXg3ZeA5Td7IWmHbC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=72973\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 4119\r\ncache-control: max-age=14400\r\ncf-ray: a0742923ba3956b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57676,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96c039cc429fc09ce13a5371af06ef66","sha1":"71db25a15260279c91a90fdcb4f669d16f312521","sha256":"9d216f3acdc8499f68b3dcc849537d88889784431afccc2e44fa693fa4b1e4fb","sha512":"7493f38281297a74e930e74930f588a39c80ee0f736e0108aea37b1d8271384fc0dab1b07214f5f246c596f0d4913b6d48e1e74e705e80048a42ad074bd2f1b6","ssdeep":"768:SSfhSGgh514w84JwI8nVI6R+SydB0HjBww+pQZz71cqZzYbD8J7y8zleREdZoVc6:t5S51dgnVIAyd2FwhpAzRRzbzlxd69","tlshash":"d74302bab882e57e9b2c711046431ec616fe5d87e7d0c8c58a7bd748931a53d2c8fc81","first_seen":"2026-04-22T21:52:39.586742Z","last_seen":"2026-06-06T03:00:25.570217Z","times_seen":6,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_4.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_4.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=75768\r\ncf-ray: a0742927fc57b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-127f8\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gMlatrZT5XIbKrYX5ZGETGn5cev3IcWUhFcH90%2FNVIH2bfqLMPmeL1Ft0H3Agodbsfg90ZbhEpZNuk4wyFZPLFcVaB0%2FL7n%2FYhJ%2FIaghYl3KX75aNIK28Z3EW%2BQ1pOAn2oZ7dKg8sEcNd5aS\"}]}\r\ncontent-length: 66068\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66068,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bf682b27d02bb8eb8fd5b14ab0d29d0","sha1":"5fc95037c923e7f61601e5871e9f11d5a2139ea3","sha256":"f199aadbb603e1bc946c07026356eae3f515d70066c1f960615effbe8db38a93","sha512":"90ab6b5ff9cf9f046a2fa77afcf92360508d0209e26199c3279cb7838f8fa127427e89fd87d35eee4f4c6f2c06a5574ef1c757f526320fe46b1f938043de312b","ssdeep":"1536:fd5sVIi6E5UuzgNlYMtcis8+tDt+WippH+Gc2dBWqcJAb:15sx6CfgvciEtGT+GTWHJu","tlshash":"a45312432aa616c3bd9e631d9a07c7f9b04d26d236f1bd5fd82247e8828709fb345461","first_seen":"2026-06-06T03:00:25.087743Z","last_seen":"2026-06-06T03:00:25.570935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx2/images/seq_0_4.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx2/images/seq_0_4.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=51074\r\ncf-ray: a074292b0c7fb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-c782\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yXWO20XQdCuION14UnLx9AFHr1yydLbjm0nGs9d5BF5XDEQstt7Q7agnRMv%2FdpaJ4P57AUoLqrJ%2BNVdU6cPHDeFoD72orCQiSbAFZp6c1vYd9mylpwDkCtBSbrZOUCt5xh2D3F%2Fs4lLPwYpx\"}]}\r\ncontent-length: 42032\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42032,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6394312a19614375bdee3a9a5b0178f","sha1":"ffc082a1cdda53e645cca4efa3b1a8da7f579a87","sha256":"d568dd0f4c3531c485da95e9d8fcf6b065fc3fc770233dc9a4f0cda403982e1e","sha512":"328a17a23366eea22cc2237a0102d5173749dcc46ab6197444cbbdb5852b9b4b791efe02be1f0aac07e24ec162b3fb7315ab1f9b55d3c4d600464c509a3097dd","ssdeep":"768:mJwrvecXxp2BDi0NfLo7+/Fss7U8Wk80RCO3chIsQgQi1U5T12QZ06SDYkgbREt:8wTRXxp2lbfLN/SR8t8638IsQvdPZOeu","tlshash":"ba13f29af4e53383b193f301bbb424f0697d31e7c05a375e7afb576875948868078826","first_seen":"2026-06-06T03:00:25.557898Z","last_seen":"2026-06-06T03:00:25.571631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_14.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_14.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2447\r\ncf-ray: a074292e6cc1b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-98f\"\r\nexpires: Mon, 06 Jul 2026 02:56:53 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OyicrWObK%2Fwqz5yHfUC543zQC8hfXAvoc6Q73WeXYO5%2FDpj4u%2BEcRYxFRUBl7m20Kq5Q31aQuHdBbRBs2olD2iq%2Bc3CJ%2BHPuWKBxQQKhTRP64FmWsy%2BH5MX1AJREyyl7B0Yiu54FKVlKdHHD\"}]}\r\ncontent-length: 2164\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2164,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"734f8393a63f83e9983c9ac2c62c48ab","sha1":"e21a0a3a2375ccce909ec5f964e7a5cc75c5c048","sha256":"08757785df4210cf0c04df4c894a5379c8de994bc9e62eb81adc148ffba4acae","sha512":"0339c2c2672a3e4d11089a793dd35a12368b24132a533b7dfe8639f141615b9b60e8563fb9e17e5d97ca60977a9e5971493946498670d9846d596f5f9e746612","ssdeep":"","tlshash":"3a4129e9eed7dfaa883a2c44c3051e64eb44430c8ad6a2263506541490b533e0f1cee2","first_seen":"2026-04-22T21:52:39.657045Z","last_seen":"2026-06-06T03:00:25.572486Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_17.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_17.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2032\r\ncf-ray: a074292e6cc2b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-7f0\"\r\nexpires: Mon, 06 Jul 2026 02:56:53 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6RpFOg5OUP3q4%2BfXQz7Vv1QEgJ8RVlTymbKozwTHeXT0NoPTp5o1W%2FBPRxSuBdLDcXQH3yrszC2VMGjtwf3G5an3oPHFoyMw2wva44Vhy2ijtMPozl3zsLhsptCnSuO9xvVXJ9ScU3geihKR\"}]}\r\ncontent-length: 1762\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1762,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2966ac4b3bdd1cb15de4577bab8d60e6","sha1":"b5f5a1c12cbce1feb724d2712963f23a5838f6d6","sha256":"a3b2824b2431ea190d6fc9d9865f27d1bfd4703e909926e0dd3f60badc0056b1","sha512":"4e2f2efd53223bf065e02d280db707ce66945e47a12148a6391df31bf4421bb7ca06e3e321d97cdcf50ff569c509cc2982538ee3c24cabf7656c5ec1c1b8785d","ssdeep":"","tlshash":"27312974d0796c1c0286eba53e9a960202014c397578a03ff7c64a486820400b8ff4aa","first_seen":"2026-04-22T21:52:39.761602Z","last_seen":"2026-06-06T03:00:25.573029Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_15.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_15.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2464\r\ncf-ray: a07429301cf6b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-9a0\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gO5hpFcrpy4cHoSzp7tRYPZJtvL3GNiJ3xqiHGHqS1%2B31Kum4m%2Bvd07eGTf9o7xO9nIq4R3JrX4BpmKRLuDc7JLnvbV1nkoi%2FDF9ZqDOi7NJCGKjTfPOKXN9TQo9eIQ6Xf1lLzaHvkbqFkLm\"}]}\r\ncontent-length: 1968\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ae3515357893f0b318ba902880e7a9b","sha1":"a7648f5df8955af3c6796f149c58dc0f112fa1d6","sha256":"d5b692f3c9ffa62880a4af647e09a30c8df72f2ad9098216c94d88e1f69869f3","sha512":"4b79816db0991c2d2e88bbf73e342653dbfc4c9aab96419207ce5925d1817d94dbf8474c63ed0de275260a789c953395000d9db85471d6e67782a01da6bf8952","ssdeep":"","tlshash":"60413b1ddd96548c6d7674e528e18897ffbf8c630db031d21a7009f721798a219bf848","first_seen":"2026-04-22T21:52:39.787099Z","last_seen":"2026-06-06T03:00:25.573543Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/theme/dark/spei.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/theme/dark/spei.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1824\r\naccept-ranges: bytes\r\netag: \"970d7b19ef95e3e1ad54f784ede8713b\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:10 GMT\r\nserver: cloudflare\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=4044\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lywVWmcLAHcGdbX46j1r2tARABcPPkrQhZK9amLA2K9dPa4PMnaJcW7FdVeE3KlWKtMZqk9Yvjs6zW90g8u6jIbFPVdDHo2Mc3CWf5igCF42vQcja1BffuJtrffcfMyq9MhKat2ltkr7\"}]}\r\nage: 5567\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429264b1a56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1824,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de9940e250f0c6df523e6673129970bb","sha1":"5f406a3bd91b42b818a7a790d84798ff681cab07","sha256":"60bfab09037ceed8487979c746a3e8b9176d88e1f850ddb0061f49b110b5d5dc","sha512":"1586685c04077d8839b1cd5d2477cbdba3c61d35aa1f445506e3c62488bd730b608078aee9827e2f415a20d50c9b0c280d34b68a397669ce5f40552a88d8fbc2","ssdeep":"","tlshash":"2431295c506d1af715e4fc0ac04efb9a98387dc2350bce08f7e68e203d07ca0920ea85","first_seen":"2026-04-22T21:52:39.481531Z","last_seen":"2026-08-10T03:45:16.373557Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_22.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_22.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=80822\r\ncf-ray: a074292c7c89b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-13bb6\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QixAOvDtns4U2ja7ISK9tamqcmyJrp2ke78OOAtrqtmG7DkhNEbF8i54tge%2BBb9ZbVEkkiIBUm08uoVsWye1ounniFzQ%2FXdlXMQ7UGoPNlHpjmcCPKK%2FFE5SY1QSEvHmGveiLSE5GsIGwokB\"}]}\r\ncontent-length: 70226\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e37e41dd65783be4dff6dc34046e8eae","sha1":"e3751e627df97dfe6192d223eb3b3b6ecb351271","sha256":"caae6efbf5831749ca83807a2473969ad2176485db3c588f902b7c5fc586968d","sha512":"ec6e50c4d129dea4ed99025d47513936cd16c5b253138176874e91ec4b45e20b6b022382ba810b8998d1038cab79b1f325bdab87bd2b71236e993a1cd5710ae0","ssdeep":"1536:pe+J+ZONp1bLE3QqiqX9F96wRuqoMOUtc///69bgg3W:pnDkAqj9e0/cv69r3W","tlshash":"bf6302ae7dceb4881f9b29dd25c7169e9931c00344b3ba6cb9e14fe00d33cb5591b2a1","first_seen":"2026-06-06T03:00:25.185474Z","last_seen":"2026-06-06T03:00:25.57507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_4.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_4.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=69207\r\ncf-ray: a074292e2cb5b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10e57\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41MX%2BebvVdWze1Y1hx7ihe10VH1y8Ypilt81r%2F%2BfiMBH8TJLl%2BIjZKveN9D9m5ILmZ%2Bzs%2BE0sbPVWfCj6jkZZQIbFyTUULFNism%2FHBf80JkzHrBvjWFX%2Bn9SpTxfDEgPjt1pJWBxiuI2fJJb\"}]}\r\ncontent-length: 60306\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60306,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9a67e37c2d228130a37c35293fc4ec1","sha1":"f99768ab742a6677e79cecc60dc03a53216f5d83","sha256":"dac3b8f0dfaa6e9f88e078cde86148985ef4b671c7ce677c45f21841ddaf7661","sha512":"82fda600b18d50e4a67461330867e80fcb00c18e02fbc1f34ca4407f1a87154a1ee91502b2387e63141169b3868f43ab636ec0054a8bec50f6baae5ed0652fd9","ssdeep":"1536:Q3jEIyq0ZbWt1uOa3mdxoGttXslC+9m/StT1e:mEHWTEceGt1sU/21e","tlshash":"cf43023e87793f128f14b4fd41506c9eee64252de3c75fe483292a14a1c1ce742aeae5","first_seen":"2026-06-06T03:00:25.302519Z","last_seen":"2026-06-06T03:00:25.575697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_12.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_12.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=65824\r\ncf-ray: a074292e6cbeb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10120\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3zc8tH4wHAn8I8ZAN2QFXY82YM%2Bkgo5FKk2raU2%2FVW0x9W4rrEvw0%2Ft32hfo%2FCAsem6oNMttwmURobbA87LbACtA%2BkSzTwkWuLeWZMSQdbhapdiWLpVcmPHIJAA4tot2AwbIWRUWmnd8NTv\"}]}\r\ncontent-length: 57344\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57344,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3cf3ebd1e2be9a1cfaa819ad602ad030","sha1":"ddf2caa78fa49ff90121fca9e95a73ff467973ca","sha256":"8534e63836012f94148bead851c1899d89642e785d9ee3c2acfd59f290994281","sha512":"6c6bddb8e737e8ce310f983cb7f36670ccf75a32999f74cba9d1ef8c75fe684dba7add6d92e112b31c262e58752c5436569a8c233df3d0acc993ef97551633fa","ssdeep":"768:nK5ZUqUdYLe7iVgtjiy7quMWYiPwkP1mDrE/NnIGzKlSMCl60tkjVxYKY9EZ:WaYQiAHqH9E1mc/jzoEtIVOFEZ","tlshash":"6343f294eec7bd6817f4f6f4402193670a7de4916a21c2706c0ea54fe8f49ee0352a7b","first_seen":"2026-06-06T03:00:25.485888Z","last_seen":"2026-06-06T03:00:25.576425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_0.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_0.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=183\r\ncf-ray: a074292f3cdbb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 149\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-b7\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DjGnwf%2BcFiCnzT8TX4fOfJFrpvfpPi9mUtDkwenNxvIT%2BA9m60ACVLLkfH9Di%2Fwc39fF%2FRN05jeWpg3u62wvIqCRGdjSkpfnwMOGa8Pu%2BAItiNdphtDMlyxgrtDq81hJRs5WGq4uUy7lhzLZ\"}]}\r\ncontent-length: 42\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c069f1d01e246aa4efe4003ede7d5ba","sha1":"9aaee48762232ed2962af602dcc8c5c593f8d3e5","sha256":"d5e27bfdd05a0b1e91f6363cffc8883efc6d3f703c53faa2363147853cb7ff57","sha512":"db60f92e4d68983ea106d42c43e704824a361834c3419c313dd4b3cd471c893cb6c479b9690558b5c1268c2663473df86091dda58933667996d52cb284a4dbe8","ssdeep":"","tlshash":"39900450d114500414151c4501715dff447744504054f1f3117704744f34c5413577c4","first_seen":"2026-04-22T21:52:39.558796Z","last_seen":"2026-06-06T03:00:25.458046Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_10.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_10.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=68094\r\ncf-ray: a0742930acfeb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-109fe\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ki3TvkQYhOZ83zBcOObeEn6TUDvTiZfeoSrjPsB2IgTWdayxqXXlvpZp%2BOXNDhKOMEx0okTolDbY44VEwNoIoSWN5kUuy75v0wbi1MHNGUEeWlLoqaNTWj5s54Uo5KJPmAwh16vH%2FxLeTWAO\"}]}\r\ncontent-length: 59142\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59142,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7dcd2e2305a89e07072a4f9f4a677dcc","sha1":"ebab316a27245e30d6193fbb1daf2e275d42036f","sha256":"c7268cfcb023e36e22404ae31b04331c5b6840d326e2b339a4e2e49cd3ad0d3c","sha512":"f509c6a777331ca447aa1de200ff406f816bcb9ac6e86925589cbdb242f6b779cd11d1eb1c80d6b0dd1a796f4259beb951205a41a2572b6be7197766fb64c793","ssdeep":"1536:RKgFh5wFEzcwoW7CPfY+O9XaP+t6EjKNfH2ZlRj:R9GEroW7CPm9Xs+4Em+","tlshash":"70430225e27dfb443e24b566b55d21f3c0cd092936aa8fbdc8b45f34a34d987802e527","first_seen":"2026-06-06T03:00:25.021754Z","last_seen":"2026-06-06T03:00:25.578947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/PC_Activities/jackpot_es.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:22.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/PC_Activities/jackpot_es.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3044\r\naccept-ranges: bytes\r\netag: \"1aeeec4f0c2cbc31941858c6f7854d7c\"\r\nlast-modified: Wed, 08 Apr 2026 08:10:27 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWocvmpDofydQLEemuyfEcdNsQRpp1eNfZBdZ0GZXU4tKEckF9Hv2qJoX4YdS6iZCEPAdSYr3llE6rlJru7mbdFuuT4tDrFVMGXFzzpazwqSLJ1sPDhanLt4MaaznIc%2BDhHQesOk3rqE\"}]}\r\ncf-polished: ok, orig_size=9612\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 882\r\ncache-control: max-age=14400\r\ncf-ray: a0742923aa3256b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3044,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f7675cc138395dfb2cc69d69b2cbaf86","sha1":"2989bd06881a300559a4160d33d93b58024c445d","sha256":"812042178daf6c82baa03fa944c559b312ef9f41017858ddc12a101f468b0c17","sha512":"0b3ee59798a358b16b39cc7980f7fb92912bf1f140800c963d54e4e762791641853a075a01f1c4bf8ce5dc8fe6b15ac5c143abe2acd373bb8191d7c5d62819bb","ssdeep":"","tlshash":"3e513ac795325c684db6d883938074da0b662bff40eb85f861a332c42122cbb7d68529","first_seen":"2026-04-22T21:52:39.905475Z","last_seen":"2026-06-06T03:00:25.580713Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_0.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_0.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=80700\r\ncf-ray: a074292d5ca7b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-13b3c\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fXI9ntL2Bl076bOvuBPEnadRI2oh3bNzNOH2xg2N5n8PtT7yM9pb0R9kERPbiEP3TzwR6IH2wvVQ0XtZTOQ%2Bo2oF6lJkT2wTt7fiLJw0IZE0ZWJP1lCRyw54mCnqCV8TzAv2tToaYQNJS2wj\"}]}\r\ncontent-length: 70852\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c9baaaca0032cfc14466766722c2257","sha1":"93265f8b02b1396f5697ce625db67fc01cc55121","sha256":"f4ec0e08e4c2deb38600b2b4caec39a974c2b87fc430cd825ddeacbed2a5ce44","sha512":"cd6421cd4f6dc26f6d8863e02fd0faefe959f7f325cd2aaf261d81a2f275baf112f9e28127373392261d4b0b032ada7eb86f229bfeeb0cb6a989eede87f951a7","ssdeep":"1536:wMl7jQM/749Z2rClraJaxfzZjbSKsTmeYklBVvLGqlOoDUmtk2:ttQ+7alrvxfz9SKsllfFAoYmm2","tlshash":"8a63024275fca4f50ae513ae161a41a73ad37a468f29cd6c6853db3321fb738a143ce4","first_seen":"2026-06-06T03:00:25.553302Z","last_seen":"2026-06-06T03:00:25.582164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_13.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_13.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2603\r\ncf-ray: a074292e6cbcb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-a2b\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TAvuF7UBhpC%2BvdqpFNoP1Myuu4Q%2Bu81KRu7zzSds2C32GDCMs%2FZ5W%2Bn1iGqlm4RK%2BjBbh6nrrIHqf4z29FuwYsF1x1SINvL9J4rvD52z7abaPaA9C%2FbnA%2B8s4BDCjDcbJC1QPnmN5HDKwGyE\"}]}\r\ncontent-length: 2300\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69d290c5fd607cd722f9658e3611de24","sha1":"e69b2b05598ed68cac43083f6376883f2e7070a1","sha256":"6f2f178da5fb55b03693d703a252cbe39bf47eaf0784b99434983a3330caf377","sha512":"d790f04050f55e2e9feef44ec38974ec72e53a4434286070b0f33d3b460e13056a840b44fa0ad2da47e9897198fa5d0595e4df9ba3b89dc23a97c968ff701e2f","ssdeep":"","tlshash":"5d4119a0209a0581a87872c7b1170a97464bd92276848cd56f3369fed96b128361be6e","first_seen":"2026-04-22T21:52:39.8776Z","last_seen":"2026-06-06T03:00:25.583588Z","times_seen":6,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_12.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_12.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=16235\r\ncf-ray: a07429317d1fb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-3f6b\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rOy76wcSEA5rN5KX7Jo5oyESztMQtvqqp6MyyzsBqSsvNLEOCydB7QlnNAvJ0FhvLDqV83fz%2BY0E7oFJ%2BHB4XkCqTlCXQENaFFKHg0f3DVEsyg7O3p6mMdouOkYg%2B9u%2F8ofyHhqjRdihJkX2\"}]}\r\ncontent-length: 13422\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7aa36899e89bbdc86833943c1e83dfd5","sha1":"c2ef198b01a1b35e0bc1e8e588a0e2a5cb4bb484","sha256":"80d67da2d4c785ecbb82a1c7277e0541c0d7475b59c85e3a7bbc39f9a679c79e","sha512":"41624987a1a295d16cc1cbf1bbd9bb439051a6b6080fb3838f849356a2db9242cf79f4b4c984dade251906ee935d31e83030cf43b711fe6f25c9d6a26e4d87e7","ssdeep":"192:cqHqrSOPRnxz5l98M2h/jikrZy24JGrniIPCrGJP7naFZ/qkmUN18TbNrb/uVpmN:4bvCn/tiIqGN0/qkmvTMVpmvV","tlshash":"7b52d0b062dad6b46200adecf1e75f32ed44296da20b16283730758020bb6613de230f","first_seen":"2026-06-06T03:00:25.121079Z","last_seen":"2026-06-06T03:00:25.584414Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/game_notice/bg_1.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/game_notice/bg_1.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25176\r\naccept-ranges: bytes\r\netag: \"09e5f354ea7df759a05900896f677d39\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:06 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4au7RvpNdGWFD0LvNynBQhnbgB%2FODblTYUzfXg2WIVs4hoFqWAMv9nhx8mcylAWW4Wshnp3Hx1gJvsJFy1d%2FzBkocS3UgCKtbf3pkxl%2BH9Q1MlSY19LALztX%2B07Jg1rgA5utxyKCx%2FUR\"}]}\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=31057\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 5363\r\ncache-control: max-age=14400\r\ncf-ray: a07429267b3056b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1282c3376234100e450328e6b6b3c0a","sha1":"93c352f20da284936c99500c14b64f5fcb64d187","sha256":"fbf16afde8341a6527bd6ed5b26e7cd4295ec7a8b19ab50fb0c5dd757cff54df","sha512":"2791e087137b25e332303e357411c82c3d4fd4170f17c787ec3a70870b828f78369e9b5b0475bd6fa70aa4a47868b95b63c148d438ff186268ebd69077e3dbf5","ssdeep":"384:JZ9/ZsbZKC2BHLbDeOWIFYi50XtSJX89XDp8+3jNP6BBwSJEluZ0l6Jfp:JfhsbZ6hDEIz50XoOtjhYwp0w6Jfp","tlshash":"2ab2d1058b3e1118b58fe0d308c97be2693dba83c393986774ec9c655720f7a09fb816","first_seen":"2026-04-22T21:52:39.865607Z","last_seen":"2026-06-06T03:00:25.585387Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_5.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_5.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=6213\r\ncf-ray: a07429280c61b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 154\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1845\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBRl6z7ADHKyuftbrf%2FdHvgNb8Ltfi2eVRV5USjq368Jtkd7o10lVo1YMoqCkj6CaHJ9IA2qpjK5ftqUM6EIS1Lxf4rN14rBj%2B4TQ8tLb1nmsWDwhvpZYTIyvtRg%2FD3HXtYtckQazq4hTJDR\"}]}\r\ncontent-length: 5388\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f752886366ceca501c267021639b219","sha1":"b99716d181592fccd880cd20f38fdf076dd90e56","sha256":"a52ba9668f723590a7144e0195ef05055ac71be9ec4bc3b6aa7c096e60f9e8f9","sha512":"9984ce559be6caae0051fc40c984ead7465a63d3a280b52901c7a03e30250a82ed4611cfa62f9111372f451dffed7e1698621738cee3568221d8bcb40995c3e5","ssdeep":"96:gdjHCXne5bukjtEaOMZSgAvKB+4ShrRFRVds9aKm+dCFMY3ZZMi3mXBf1AYE/UAX:gdjiYH1SgAvKBCbTLs9aK7CF/pWuc1AP","tlshash":"a4b17e59457974389f0b387048c8b63618ce73e569741b38cbecfaa3328fa744a44e58","first_seen":"2026-06-06T03:00:25.43302Z","last_seen":"2026-06-06T03:00:25.586099Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_25.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_25.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=76787\r\ncf-ray: a074292c8c8cb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 152\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12bf3\"\r\nexpires: Mon, 06 Jul 2026 02:56:51 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=asc5SbG6ylzMtp9vAeRheOQTZHXCgqolAVGi8qijq39dgpPmfh1RH%2BXW%2FtpHW05ssqVKB5PgsnIHOzSLZTe7VHA1L8t2vcKJ%2BDGT6%2FDOXNbo7KGpZQs1dTofta5NQHboIfXZMQn2fUACDTFh\"}]}\r\ncontent-length: 66662\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66662,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"671535fb80e88b7886fadbe2ef30059f","sha1":"ecd2b0f7081885a0c166f14ac432b10b0cda3484","sha256":"b44e597f5a975adda93ac9ff8730b08a3775b89cbc105fb9b47bd1f90efcb395","sha512":"4227bfc6d760a96dfb1c55a95fda5314d7bce75a0fa41a1a653cb1975f0eac553f0c4f0461a02110dc949bf65ea546cb91980b87a67385e2210addaa7a9ed35e","ssdeep":"1536:LQJP3z+PU5VxZu80w5vuhOy/5BGsnoxALTF3saAuKLI:cd6PUfxc80dVofdzI","tlshash":"bf530294a93c33f07375c9be4b7c64022612802006b66934267ee7a83ef69376fe5375","first_seen":"2026-06-06T03:00:25.360603Z","last_seen":"2026-06-06T03:00:25.587005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_12.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_12.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2698\r\ncf-ray: a074292d8cb4b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-a8a\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1krfFu49Ve1hB8dp1geOfXUHJjqjYRhE43EHdBqmnCLGDbvTYB3%2FkvB8UKSnI4TFtfAZw1ZJr702%2B6L3QwxRxPS4ENw8JGezju8ozTJwjd7Y4mKMNwzJPpwQ6achZjwbja7OdQve2MwjnQa\"}]}\r\ncontent-length: 2384\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6539265f07fe89b5da7bf15ce17f8da8","sha1":"fabc993277ec3bfcb09f90d5676973d23b99bdcc","sha256":"0b9ac507793d9b802378d610e48d31123e79303f26570ab213967e5fcbc9ed30","sha512":"4827404403ee06901cccea89c52da9899ff1bf87aecbdcaa32a259d2a485f0fd4b8ee2c8ca8d434bbda9d5c552773dda7f5f8adf84db329c15aa42cde9bc3bd8","ssdeep":"","tlshash":"ec413a4cf95b06202721bdbc9dc9240cd82912a207c6fbfb88f22c86844fff5dd42868","first_seen":"2026-04-22T21:52:39.738768Z","last_seen":"2026-06-06T03:00:25.587768Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_5.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_5.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=66331\r\ncf-ray: a07429301cf4b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1031b\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqlJlkBwtOMlmsP8h%2BOteTF1NeGink9XOuXxB%2BzMTmox4yQUXiaOAf5tIWK0wqgawbud9Blr08gra%2BSXNkTU3etKSGDaoPTm4Q2qfp%2F1L2xJpgBfF%2BoZRgbd7I0qrQ4qXSPid%2Fywt8wuLhgp\"}]}\r\ncontent-length: 57320\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57320,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"616f1e804b41f31cd3a834083ae486c1","sha1":"73fe3cef3b2d04f2d820ac16d58df0e65d4c66a5","sha256":"925a86a6aa1fe3dd99601f04efa6c59355e1260054e3b57f005c948456300c0c","sha512":"f0410d649ba7e865e1e682fc9aada9f7389e8d1f1a0464c52210621221689d27fdd6b3bd6fa862d3fc764472c4a99ca4910fdb7c47ba4100215136670179f2a0","ssdeep":"1536:y6lL01Rb9nA64DA8LvJvJuG5pjWMNCF8EqSA:y00jh3ETLvJvJrpyrF8wA","tlshash":"b0430261d480eb96f789ab43991331b5fa7730396398f4ab9e3accc4c1cf951260b359","first_seen":"2026-06-06T03:00:25.566882Z","last_seen":"2026-06-06T03:00:25.588378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_8.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_8.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=68830\r\ncf-ray: a07429309cfcb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10cde\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KKH4kFYCiN02%2BDWJE9Gd%2Fduvyf3YJF%2BPho4cyL36DoBLdsnsi%2FGt3LHT%2Bg8gH4x16Sj0KZsduDTq0szUozr7qBoQvAZIK7f%2BINacrjCt0G%2FB%2FGnr7KyF1ZdGjMBJ%2FyeVVRaq%2BIpGXNp5tAqc\"}]}\r\ncontent-length: 59646\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59646,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5fdec30de650dfb3f29a393f2450b32","sha1":"18f32acd8665356c3a566dbadd92e6dc0fa38444","sha256":"94b59a18d6aabe4608c66528d2d7875ca83f38b7976be66c84ac436a561b5291","sha512":"f8c22c4ba1897ebe28f271d814a98ba55ec9977c70552795d36d3f672976738b331ac62905a659ead9516451df4622c0791e9e634815361dac3f1d222f47fd9a","ssdeep":"1536:iwSJ/PpolDGODNMakaGgtrAg1b8Agnz9HqiqUf9WtOj1X:iwSNpoYsCDgR1IAaFqvUVWtOjh","tlshash":"634302fde7a25434b6f6d8fc9148fd8894cf6562af2909ab8c6674c08f0060da94c74d","first_seen":"2026-06-06T03:00:25.074769Z","last_seen":"2026-06-06T03:00:25.589178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-P439F1TYT1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:20.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:27 GMT","end":"Mon, 10 Aug 2026 18:35:26 GMT"},"fingerprint":{"sha1":"81:79:25:0A:2E:C8:CA:DA:16:EF:B8:34:B7:38:E6:48:7B:5B:4C:6D","sha256":"7B:74:72:15:7A:A8:4B:D0:1D:D6:11:DE:7C:D9:15:EE:E9:22:FF:E8:56:41:9E:88:6C:4A:F9:9F:AB:B3:6E:2C"}}},"request":{"raw":"GET /gtag/js?id=G-P439F1TYT1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Jun 2026 02:59:21 GMT\r\nexpires: Sat, 06 Jun 2026 02:59:21 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 158350\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":482380,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6370)","md5":"ef06e525d635edb7e9c0522b23d80a1c","sha1":"3d0b2975880350dad2318a2cc6c8f3dc11ac188c","sha256":"74014fc4a23e8788cab6b72e49d2eedb4517b60b6562ffe2efd93abce2a6b408","sha512":"f4d63569441ff76b420c68e74f3372725a2006b4b5ed733303e75772f9593ac1187da5e5b7a1c252ba311ee3a918b6053ddc4da2f28bba8b64c99e8c8ba56f69","ssdeep":"6144:8LvL3GsHPLzgbE47c2bXW0w40dicStQoxhDKTl2xGKQ:8bJz47LSoOf","tlshash":"c3a4e8ceb3d674625396f478903f01cba57b28e2b44cc89ab189cce42e7459a4167f7c","first_seen":"2026-06-06T03:00:25.59003Z","last_seen":"2026-06-06T03:00:25.59003Z","times_seen":1,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":138,"dns":1,"connect":27,"send":0,"wait":61,"receive":81,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/galabet_pwa.js?time=1780021684393","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:20.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /galabet_pwa.js?time=1780021684393 HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5MTpiAJ18kW9LXyrk8bu0fRvsCsRAEFGYuHGJcIXW5P8om5jgu%2BtvJBSO8xurXnbM%2BQBuvSglNb0x7uYQ2ufKLKGiJlsTO9lMZJhAj9kroPO%2BWoP2T0Zi9Zra0pygvPWmkJmAjJxnWaZWMl\"}]}\r\ndate: Sat, 06 Jun 2026 02:59:20 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a07429171bc7b517-OSL\r\ncf-cache-status: HIT\r\nage: 154\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\netag: W/\"6a1d3e4a-548\"\r\nexpires: Sat, 13 Jun 2026 02:56:45 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1352,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"a962618364fc8c485d5307ca2d6183ff","sha1":"14669658cc93e511cf5b136f4b438136f544194b","sha256":"f84417f7e0e9a86fd3ffc6d6d920f555001bcd53f2502589d79119c958a3bd92","sha512":"72595e4c499330eed5bdd2e8bdc7226b8ad7a3613510a0f198cb7654f2f16cd4c2db773f84a00653d650ecf11053c5a6fb8266ed45abfccf84f8f731900372f6","ssdeep":"","tlshash":"a82120d8dbac9cbf46e1311a5d1d25cb223e11b29d0069f2ffa82b64218115e46ee4d3","first_seen":"2026-04-22T21:52:39.716782Z","last_seen":"2026-08-10T03:45:15.954545Z","times_seen":7,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/gif/gif_12.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:22.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/gif/gif_12.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56620\r\naccept-ranges: bytes\r\netag: \"8a78d591f6c4845591aafc5e701f8c2e\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8d2HD1AiSBiYWchRhKpmz6r5qLIg9u8tM6hUjs9U1H%2FaQd%2FFRKPGsDqU7d%2FzNx%2BDMgWH44CywPrLMeJYs37zlLFdKPHz0QsEMR2XL%2FdKzznXfpHSAKVzVv1yqs9d2aM4hhQ61T5V%2Fj3f\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=76738\r\nvary: accept, accept-encoding\r\nage: 2530\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742923da3c56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ebc313eb0921ace93bd77dc527e8020","sha1":"49abfbd74e980ef2c93851b3f2692c23b7b895f5","sha256":"79ffef3708f647e2c107da268508ce52a3e8f794a381c00ac302d31186517e91","sha512":"dabda3492feb914bf57fc7f608b14de0fc26e299c24591eee92ccfb3e123b01b2ae9b34a43f13b2c636a8919e21231e4dcfde964c3096219abc0e82e8cfa6d80","ssdeep":"1536:Vt6yf6mzGmhna+PC7fjtwOoLYyCb/urBArNU67YnTirJI+D8+:VoECtwtvCyNAt7CgD8+","tlshash":"994302d1d26ddf6e8a1a2d6dd31289f05082d14c8f32c8924c879c6360f4bd0e2f7da6","first_seen":"2026-06-06T03:00:25.548683Z","last_seen":"2026-06-06T03:00:25.593772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/gif/cash_capsule_es.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/gif/cash_capsule_es.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2822\r\naccept-ranges: bytes\r\netag: \"50d4ea53f9cf1edd0b44abf8d57d8af3\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:07 GMT\r\nserver: cloudflare\r\ncf-polished: ok, orig_size=7861\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VnLAOxr6UJmD9NJlnkb5lTWiCNpB0SKM7GmOd%2FEJNC0BvtgfF6GjcuISpbXh25NRx547fb18kg5T9qPqEZ%2FlN2sybjjQy7b%2BWwMXz%2Bzl75tE5Hp5tEBJUWgcav%2FkSM347rcGf6WL0lP\"}]}\r\nage: 6548\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429244a5c56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2822,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d9465ab1915683dd23e6950c727724c7","sha1":"9ae14cd6e1092fa5a9b1d1f531a28bf81e49dbce","sha256":"933fda41998b5875005e72a352bcf6260a6e7a42900db6d57866051bac494d90","sha512":"c779326411e446d9a47631e0b3f22a13ce9f06c28ccef5fd3049c30ae81c955f866a73f47a4bf5c25a27b8bf4cd41909f690a3df4fb39d520e57084b98de2c57","ssdeep":"","tlshash":"56513c1c005223118af1d9a0243c88a6f17165bdb279f313cd6fbf8db2b5661d9c786b","first_seen":"2026-04-22T21:52:39.794075Z","last_seen":"2026-06-06T03:00:25.594546Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/referral_rewards/bg.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/referral_rewards/bg.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 204632\r\naccept-ranges: bytes\r\netag: \"05400a4667061ec5fc09248506f61103\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:35 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zme%2FQJj1ldwp3Hq%2B6UR%2BdCcleCDLDOJysO8%2FTbV7gPOCJ2cIvbuLt7PCuvhyX5eEte5NXiGaTf3IcEAahfBHGT%2Fjw0jhrDHBHsgl5le3ieuh99uQn7banug3DCPswN9vJs19Vw4%2Fy5eV\"}]}\r\ncf-polished: ok, orig_size=281020\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i)\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 587\r\ncache-control: max-age=14400\r\ncf-ray: a0742927ebb756b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f2c3b84783d0b33204527df21cdf018e","sha1":"31e98e6e9ead6a4138a36300a5af2b4c9708037f","sha256":"f80945adc6a3f9904bf75170cba2c0aa589ba29be5f1a5a37aa9e88a3f5ee551","sha512":"7637efc8766cfed7474f16474b2d92c2530bbe8454432797ebc87797c5fa72776dc994cf6645e06e0b7dd78c34cdd300a8db95f24667583f148a6090076619fd","ssdeep":"6144:7X5UedZIJVbDl/B0l53fK7aKF7i/cev5cT1PozF:zMJVI5QxcUevOT1PoJ","tlshash":"67141296f499c2b5944212082c28db8389dcef5926151fc5c1f4cbc2bd7daf0fa497e9","first_seen":"2026-04-22T21:52:39.646431Z","last_seen":"2026-06-06T03:00:25.595164Z","times_seen":6,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/apk/getApkInfo","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/apk/getApkInfo HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,content-type,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5867\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-C4FNZ3Ou9F97hufoHzDvBs' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a8b7d7130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZHk8cA6Sr68%2FQyU8uGnqlPjsvo6IxapVbYaCGF3wuXzX7XejG%2FAs69UAuM8JXf59IwHDnRU3YKB3FRGbcadcCBDOho8L50aYDYCm6dU0eGTJ4TPKlfLTFL5sl7LLOE%2BP9S2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a8b7d7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_purple/images/seq_0_11.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_purple/images/seq_0_11.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=66859\r\ncf-ray: a0742930ad00b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1052b\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQBFXmv5I5vaQ7JR9U6nEy6mxzZ%2Frwd3xCbsfVaw6gv1bwqqT2FxJpNZw%2B6r8vzOpFn9R1nZBot1KEuOL7NnExvSjxZafbuzbIeaCGLlmQBkPMu62n7%2Bz1BwUBK%2BosgGbBGsAaikPtDLazGf\"}]}\r\ncontent-length: 58244\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8adf82e4872ad1fb6dc8cf5885ec320b","sha1":"79d42a551c353a49e1dc7eb83ff08589046fd8d3","sha256":"44d482cdabf5835bd2ebeb3db92fde48660fda1a375a9b0f3d691964b1c26ba1","sha512":"6b150b423be537ec0bc5865302823e94e8d41a66f5e7318c89689d483d16edfff5118c04e3a228d205a74c9490cb49ae8ad158e7b27c3f835d6203e87fd137f7","ssdeep":"1536:cU/Y5LrG3vEt2D8kQZIoKFHDWKoiJnEgRszUKmMA:csQ/iYkpBYiBxRAUl","tlshash":"3e4302848d46bbd4b791b2ffa655c8785c7a0e6513ee6a8eeb01627dd413c0c68c079c","first_seen":"2026-06-06T03:00:25.533908Z","last_seen":"2026-06-06T03:00:25.595739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~app.0e5f27a8.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:33.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendors~app.0e5f27a8.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 96792\r\nlast-modified: Wed, 03 Jun 2026 18:06:43 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: C5hCiJIAAW4dLEMljYcfcrYtJfJiVfWT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 02:34:38 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"226d8d4547e7f2f4010ae86d62dbb5b1\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: qoguID5n_sa0u2DjTRwD3AMlT_XW87X5rKHUvPCmfwHkHU8LWrzrFw==\r\nage: 1503\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":498001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"28309b30d281b76c8961458a3e3c2e92","sha1":"fcf7dcee5fee0f1b1966e46bbf3d5befdf08f465","sha256":"4fae2046a46d324f35def1f90fa6df3fa75b4a88e69bad71c4eed4784021baeb","sha512":"cb4c5c2f8a2f4ad6ec05a391ae89a913c05af176a5bb725087a8cf54a3768692139e985fda5e41f4bc13ef096f155c60fa296c469b1f2b7391018f9dd6f48f9a","ssdeep":"12288:Po+w3n9KREEpXF1gFy5Kq5RWZbD/mP7qAiuaAaly94PoXDaJ/xthRD3uK5S/i8to:Po+w3n9KREEpXF1gFy5Kq5RWZbD/mP7Q","tlshash":"68b419c5b6e1f5b64b9650e2583b1007f33e4898206d40b4b35cd6dbb8ec58e61b6b3e","first_seen":"2026-05-21T18:24:25.43567Z","last_seen":"2026-06-15T10:16:39.252547Z","times_seen":2278,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/surprise_pack_new_v2/image_bg.jpg?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/surprise_pack_new_v2/image_bg.jpg?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 169756\r\naccept-ranges: bytes\r\netag: \"5ca9348bfd7ff8da8e1fdf7cc91bde1c\"\r\nlast-modified: Tue, 24 Mar 2026 10:04:06 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: webp_bigger\r\npriority: u=1;i=?0,cf-chb=(285;u=3;i=?0 18767;u=5;i=?0 74266;u=6;i)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfiZXUpDM314M4I8tvjNMgIWJXFeY2SHw%2Fj76V1DPnKXmeJEwtNchH7odSXDSG1QTzjYqO89n7dWWcv0SvTc9OZejtpYEZM3Z3OQ6FLWD6cRKsD68WBVP6I9J91bseYZ2HN22%2Fi64mzn\"}]}\r\nage: 5606\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429277b7d56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169756,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 690x984, components 3","md5":"2f4d8c552844e1e5ddcca542641d4399","sha1":"3ae71e0d4d2b4e20eabe5299f9855dcad786f456","sha256":"41e02c71ae6e59056cfe288773c2d8f5ede1bd7c4631cc15af56194aa688054d","sha512":"302d51807c4c816c52f04a1adb2f8a858b74f839a8c39b515cfe42b33082ff95c423dca03c2b2491f2308520bcb78a123a05e467ceb2774bd1de30dc8a6701d8","ssdeep":"3072:RSvGu1bVNq8Ft43gmJehiqLxiGIOoTNGvnj83Y7pyK5E/iY:Rx25NW3VJeXoG87ip1+/n","tlshash":"82f30100733466a1ebec71718f50d71aa639f8dc419c76f1242bd73a61314eea712ead","first_seen":"2026-04-22T21:52:39.867684Z","last_seen":"2026-06-06T03:00:25.598315Z","times_seen":6,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_3.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_3.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5721\r\ncf-ray: a07429280c63b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 154\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1659\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=laF%2FuMTJhA2%2FpVBhaCOhjmPpqjYY%2BqRcEdN18%2BV68sCVNZrcYox5R6THkC4JpcGjEzYXzr0F6dcxeSQsVpaW60Mx2GL5aj8d3CtXXZEZ%2BydU7zZ6Is9rfnVgQb4QSvAvsJ2btciHLMoSlaMS\"}]}\r\ncontent-length: 4924\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4924,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93fb38ed6e251ffd12def2e9beb17938","sha1":"c5d408e361621d580d62e8459c6535e487648cf0","sha256":"f04dce9257f26a16a24f7a794e33514185a869c6d74bd7f8bac4f0eba2fe5347","sha512":"00fa83f2e8ccc2e4da5e8ad82ddef6a8a8c528d16974d3b3c3569551a2602d5ffc24b9e1969213db890e3f96e4bdbaab6a8ad728413f365c2ca00953d74415aa","ssdeep":"96:kRYM3UDRBJeX9huhTe91G5PZuwevO8Ku9O6ZFsn9covc2fx:kuLRBJeX9hXw5Zde19MnCElfx","tlshash":"63a19fc40c277e28da3420f294571ec09a4d9f015078decb2df7559ad8aab855cd9dbc","first_seen":"2026-06-06T03:00:25.50807Z","last_seen":"2026-06-06T03:00:25.599413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_6.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_6.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=69723\r\ncf-ray: a07429315d14b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-1105b\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4QTZiE5VnYRphpXsKV8GmxhOHRIfRC7cdkBLtliDAm%2FO6DhgszO3duPz3bzhiZ%2Be%2Brn0CkU2X8lmrhliEvxmHvOijdzhy3ggUm9PJDF3DYgAYMHHQV3iNCyH1PNZvlVfwR19L%2Babgr6qiCQd\"}]}\r\ncontent-length: 60308\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60308,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"356a01cf19e8933b7534d3d439b5a993","sha1":"41944fb0f2c06c109bd26fe1564198ed453568c2","sha256":"d85f4398bad9c94057a33fd5d69196102a93b66bb5abeeafa0d8638028883fc4","sha512":"9326ddd119eb7e29a83bfee9ab8541ba14a5a3a7de2499bc56f77c41cda34f735f0bbd22f1303dce4fef3112083d207a7bbcd1db2ac85eba3d803c04f681a102","ssdeep":"768:imiE0kZaZAfaVupcVybRSEIAEINdp+exABWjYg68RhgMLSOfqiaN5RObgMtrk:LD3sACVUcVuRSEICpe57RFBN5pMtg","tlshash":"f9430233a764e44e9cc3031c65809492b423f7aae42975684f7f66addfb1490135a8dc","first_seen":"2026-06-06T03:00:25.048616Z","last_seen":"2026-06-06T03:00:25.600593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/home/nav_bottom2/1_ac.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/home/nav_bottom2/1_ac.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1428\r\naccept-ranges: bytes\r\netag: \"68d419b50fcacaa17b033e28a44dee90\"\r\nlast-modified: Wed, 08 Apr 2026 08:11:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncf-polished: ok, orig_size=3685\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FFbg5GQN9x%2FBHs5mvnfN2SIfvgDLsIRzjoWmrWfsH3pN8x7YEjcSfaC5OI9Z9G01ewkZfxphrm%2F3nuoKKSl8nufJPMeSPr5LMlahdtjbmKFAor3Gy3B6arUXfAqaRaK7EDhyyuHXqu%2B\"}]}\r\nvary: accept, accept-encoding\r\ncache-control: max-age=14400\r\nage: 6914\r\ncf-ray: a07429265b2456b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1428,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a9820706cabd886cb2c4461d42e672d","sha1":"98dd9ff8e5759dfe8247bee4bfea6381f870e1d2","sha256":"db298676817a2b9689ca8163249f538a378bbc9e36fd7d045ba400419e7daac6","sha512":"680831f81bf5bbacc6500ffe374eebbd20019c7d3e6442f0d843877865005c047680d12d469368e5ed7f6c08a6bce45d6c2901f107a589ce9052d7b5c9253938","ssdeep":"","tlshash":"dc211b36d236afa19d1714a452348e08eff4c89c12a3c202565930415716e6297bb7cc","first_seen":"2026-04-22T21:52:39.972665Z","last_seen":"2026-06-06T03:00:25.601786Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_16.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_16.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=78300\r\ncf-ray: a074292aec74b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-131dc\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2FCTkktjbiyUwzg%2FdyjjczC4FFYCjgt6Mf8DTtWOCoY%2FOSy7XaFgh%2F6OxKYdSNTyXHi%2BXdiHHX%2Fr1COI2PSy4ecuy%2FdlAKtT3qS9X%2BADdYz9%2BIlrx5nmp5F7m%2BPHZxaTjpBjfP9EHkC451Lc\"}]}\r\ncontent-length: 67774\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45d3e64c3cc7ddd9fb579a9999bdf831","sha1":"a29e8263b3a9c51f4ec3a81a78bac31e6fa86c80","sha256":"06463fef187eb320b8320da408fe7a044cbd2276251fb6a083b86fac9ea6b973","sha512":"d8bcf43b40ae55c513cbe342ef4378d84434ce79b9192ae05ad980aa334cc10113010f726e1c9e1f2f97f489c5cc9a7ab2ac113b4350e1efed0d55282647cc37","ssdeep":"1536:PQXxJEVPbrYCtqhq4g74h3dQJOVQopOMI1Y/O04qkSrDXE:PC0brRqRcCesQsJI6/PkSrDU","tlshash":"426312349a7bcdc04105ed1cba82ab6f6c88e8ef4410726b27298435efa3d51349deb5","first_seen":"2026-06-06T03:00:25.238005Z","last_seen":"2026-06-06T03:00:25.603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_9.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_9.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=68951\r\ncf-ray: a07429316d18b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 145\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10d57\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEmkO%2Bcr2cchZbA%2Fi5i75vXgqBclaahiHhYNyPIE2G%2FgNIfmHI1RJUeyq58M4rRWy%2FjwJmKztGs2pFfHnptoYOau3Kh9tgIbQoQJTaOvPaed32N8hFxMLrt4Bf3hNOK9M0vlHYkdkXVrN4Fy\"}]}\r\ncontent-length: 59524\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79fd2b77a76a66aea5399387f0d50956","sha1":"a49f7265cdd67361d79855de1cc13206462e88ea","sha256":"53292b180cd283657700a374a4970f6fad91f52c8d843967cf237ecca3bc41b1","sha512":"cb2f7796167c4ae723bfd4adbc4d4e7a3b5a2121e00a728ae6f1938b2bfd7654af91081d93198ba71d479243893637ba6e561e02a5338c17e8e79610575692b3","ssdeep":"1536:LXZuZd/aJzbOviFRiROUfVvztiUJBr1YDGOThGXij:LJu3aJnqIRSTBTJ9CDx","tlshash":"d14312b16c419abb3a90194636def200e670b6dfbcf03b3e4cd6a2570f06a851e587c4","first_seen":"2026-06-06T03:00:25.469409Z","last_seen":"2026-06-06T03:00:25.603995Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_14.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_14.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=16290\r\ncf-ray: a07429317d21b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-3fa2\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnS4xYjFwMdVdSni8hP8G97K7WfJ%2BgXSkp6eskX9kbdW%2Fcdfr%2FQHJhkhrnmvMt7vacXvfdV0E6D1nvBKkjXOtCo6BotV7D0448mspDPoWh6sfh4ZR69jY%2FYGRKP9drbki7qbhob%2BexTNakBX\"}]}\r\ncontent-length: 13408\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13408,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7cc3c78d781c7747191522b69c2534ab","sha1":"db04e50e5658a7136e2b18deb19e00c0aa70c137","sha256":"c1398abd25103f291221ff40c75d1de8e417fb4f60a1d8d1302691bb7dc4b9e0","sha512":"77a358817764948307b2da2b32f4b37f158beca882ed32e8c18ce7d6cb2719579b50e79f4f74392f1bd6b68b3b7fd63caa2a5b44e73fa01c023f01635b1db43f","ssdeep":"384:ooW25mhEx0Y/F8l5sgb7X/zi0j2zEjhVC:oKw20iF88Cj0zEjm","tlshash":"4b52c094e44dc8c91496f4f4c768ce77901117ec483894df8172d6af267aaecaa9473c","first_seen":"2026-06-06T03:00:25.386684Z","last_seen":"2026-06-06T03:00:25.604793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_11.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_11.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=76967\r\ncf-ray: a074292adc6fb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12ca7\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTA3ZTj%2B7zoLxQAT3sjI6HiQaGE5xG0uhqiZqjFBROuig3yeM22O1UytkM5W6KvibN3%2B7DPji50nQ%2FhYMXMA8F7owM%2F9py6fLO9rWFYQzdEKyzjTFkFf4XsKIAA2gcmHPKPjqzIQDifdHv08\"}]}\r\ncontent-length: 66606\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66606,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ecdafc500f034312cd740013405e2256","sha1":"121193ac0fd1c7aa5fbdd73fda8b9335aab300c5","sha256":"bb951b8dd0ff8b4bcea1dd59d1207d1658beba23ed136f21595c1834db36c502","sha512":"ea158f4b430d1aabf006e4fccf16647a4b99697633736827ed38babfadf3a6bb1ac90008523f027a425d55c5b9bd8a6bb6d6f95ca7e0f13fedc1d1c79ffb2a10","ssdeep":"1536:TxFmvw1TiHur3DS3nTweS56wEoJxHPKsgnEP9g473lQg/LuBR8ZD:TxFi0TCJrwZPpgnc9gsVHuBmZD","tlshash":"2453023e070007d906195d2b4df129605e2ec73d5a8757c3029b69b56b532b8be3b7f2","first_seen":"2026-06-06T03:00:25.556415Z","last_seen":"2026-06-06T03:00:25.605589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_28.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_28.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=82420\r\ncf-ray: a074292c8c8fb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-141f4\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=10PKope04rJ4LDWwgyXtuEbyScxLW%2BHhkY5pSc3cT12hzlXYhzY9fkiogi9xYh7FeED8rS6UwN0%2BiyB%2FPwzotm7aaaT%2Fez39HvqA%2BfW2fUlw%2FhF7oFq3ao2wRWbpSOXF8Hcts8uhSIch3LTW\"}]}\r\ncontent-length: 71560\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71560,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1bcd0ff88343dc26f91f12b9b3cbc3af","sha1":"a555a1c8dda5f5e2dede9c388b98fbb31755f032","sha256":"ffce63415d63a6c70eed1d56172577aacc54434a38f168db069ac417fee9dbaf","sha512":"822c1dde28f30bf7a17a66473f8316201a0c80637294a824edecc72f97fb90c6f0ac8fb51661777c1d96f674892cef430405ed5c5537e9b7f648e1a3017116fd","ssdeep":"1536:DZSBvDI3LNqPftZP8lQ4xzO1almDbDLtv8VeVqezmCZ0u:DZStDO8PftAQ4xzO1uSlkImun","tlshash":"a86302b029d25ddb1823a3c23a8c0b8986a704b597212f95777e9b577cd0f005ba6c2f","first_seen":"2026-06-06T03:00:25.384869Z","last_seen":"2026-06-06T03:00:25.606355Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_16.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_16.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=16861\r\ncf-ray: a07429318d23b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-41dd\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5cVpiJnS9fVRc2cN0IbTF%2Bp0suxkn%2B%2BQDO04E6uiXUzKPmgJkLQu2GqNSyQCu6hz0X77P9BC9b4d5Q3DTAjHbqloPxKGErVICcP6W0tf7QHcWUNXKs%2BcRZder7vEVPE6bsqk6l2sfhfnsJH\"}]}\r\ncontent-length: 14104\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14104,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1174e56928fc18c77697f3b059946db","sha1":"bfdfe957d20408013e94e7ca03ec8c509549df3f","sha256":"8d2d8ce43695b254533b913437128b47b3500ed5dbef439dabc561019411f56a","sha512":"d61d18d33bc5c0d7b7b9a92ed3f7adfe4d788954d665ca010d358f2dd7f5bb31f89cad956b50e2a6d1f7f5e7ca8d4ed24330f79246e838b7bebb9ce8000f8aca","ssdeep":"384:ak1Bt680p0lnpyRkUu2PHm7WZKYEG+IPGpUBaX849iOWE9c/U0lGqzFemp:nt6R8zUugG7zYEaY8493W2csUGAN","tlshash":"d452c0a3ed048e64c59528fe2af6201b11b2515ed52801058f5ce3e4b7854ecbfdb299","first_seen":"2026-06-06T03:00:25.388503Z","last_seen":"2026-06-06T03:00:25.607124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/wish_wool/close.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/wish_wool/close.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 706\r\naccept-ranges: bytes\r\netag: \"d00899a1e19a167cd91334bff1fbd61e\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:51 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=1402\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1vHPa0tc493uOP62KclXiKuIYvFDue6cDjpQw2MRcEiwK5v%2BoRSaUchp6BQtACgugUJMVb4umW3Quw9IJ%2FdteKBgtg8yId6QW3wwZ%2FbOtc71ZqvxTJDk8xNFl7BI%2Bpwhad8Q8fHOQ%2BQ7\"}]}\r\nage: 1898\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a07429277b8156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":706,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b2e5425a364e503dd9b36e9c75109fb4","sha1":"5880a6a9760f153e4fc828370053aab00cae343c","sha256":"5e4c782a0a0f35d1d4c4b9bf444c4723a0836e4eac63767ca33ca51d622bacca","sha512":"f704efb9e894114324d0056f893b4aba608e2a987801dc0671505f036fee42be6a5572353b60a2ca1e5c00a2198b4fff39aa7bc90d233ae5738f2115b6214d09","ssdeep":"","tlshash":"e7014915487707eabff319410d4e6d9dc553dde0508831f06b83a0e28ff154de452538","first_seen":"2026-04-22T21:52:39.718157Z","last_seen":"2026-08-10T03:45:16.139839Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/common/get_fast_recharge_amount","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/common/get_fast_recharge_amount HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,content-type,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5940\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-KE9fn9AsdQB0c3Stj6ODXO' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a6b717130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iDyFoSHVnARXuGAFdzFbThx7DQ4hbBsckiP98Qd06t2MSVXRubJnBLY4c8Qau5em91j0TPCLnEuqB6se3d3K7Jtq7FOs3Y5vg2UkRoEX5Q3JLpcWBtTeOU3kLQ7JX8cSq0i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a6b717130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_5.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_5.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1700\r\ncf-ray: a074292d6cacb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 152\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-6a4\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lJj3GB904bFjYrZ%2Fl5IhNdK3W%2FXQhUWVaIDj2MnHAIpyT6cDiF5vWQbOo2%2BLxvMZ1zB%2B%2BocwwrM3MyIBuoNQV%2B%2FJvqiRxY%2FqdXbhZ0DT5HZR9aaHrr0VOcePw%2FR%2FtBMQrwLGBLnoGlOsMIND\"}]}\r\ncontent-length: 1466\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1466,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a349826744555ca66ceb635b70b49e4","sha1":"34b1a8f2940995cf2a85a936fd5975d3debce740","sha256":"588d6e95abc52dec6db251d81f5d083dea8e765d6883a32192cf489f22309e76","sha512":"181327564890bb5299a55b794c89ed31e82002bbea05ba2e41f0cf52bbf2fd539bd8bb63405cb1fa7d15e1d6ba10eeb98cae904a845429f76fa1b85390aead89","ssdeep":"","tlshash":"6b31192c0f5ea03982fb283462d8fe57a706369f0801e972c5794a62a43c1dd2db74f0","first_seen":"2026-04-22T21:52:39.939971Z","last_seen":"2026-06-06T03:00:25.608489Z","times_seen":6,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_3.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_3.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=71133\r\ncf-ray: a07429314d11b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-115dd\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SuunsBmtRCuD%2FLrrndYXlyiTphzErzFv0FTSTSNWsD%2B%2F2K2xfnRTP0X%2F5hXeFig%2FdHULbM3PeRy58rd6PAg%2BVNbdS3QR6RpGWJhTj2gFYnqOgAM%2BNxUsHOk68FxP26bps2YE2VZy0i3KkFxU\"}]}\r\ncontent-length: 61282\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61282,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83857f4b0dd2532bbeb0e925d2f07922","sha1":"bbfe3a3f1b323ffa9886ac9d7e45efc70006afa4","sha256":"cff89cf4a54ef7b9ebe4fbc8c842ff92effe38ba15e78000c77498a94acb2341","sha512":"ecc687d47bcd0ce68da2c3bfb79d400526dfbb81bad7ec5d00ba9f9591695c02755a105a2af18da5ba4adfbb49e8807c4e15dfc9129c3f1427f1b4294c0bb3f5","ssdeep":"768:V/3BuqEha187vsiuOuQlTnSVsKKe4DBwQqf33asJ0CbFIRwTBGGvI9pFfW/6IHWg:XXarsXOPlTns9w23yUFI31F+tHSZiP15","tlshash":"9153122bff2939b8bd845148f5994285cd2080ae6c5d5f48bd32d41eb9452ff89f12cd","first_seen":"2026-06-06T03:00:25.489816Z","last_seen":"2026-06-06T03:00:25.609732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_11.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_11.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=16399\r\ncf-ray: a07429317d1eb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-400f\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TX44s344Oh%2BErEwbXff%2FbV1asT%2FFsnMPOW1eDMWNGMAfegnUgk6J%2BauNuECUPLZ1IpgagqllOCeEqzd9ERx7E1hkgQMmnY8bscQCwPTVBNL08vRYe0nZrFwOH8PiUmcMIpKxXInp5lO8Onyr\"}]}\r\ncontent-length: 13552\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"690be091d829f7627064f7eb2e0cfb8b","sha1":"a01633067cf1e6e8f329ec40295693ffae77ae91","sha256":"c268c026e9e01a74da63f1e5d962f13fe465db50eff90ec1c7ecf25b7d3b8516","sha512":"bc52b8c0b30bfc6babc1eb2dec7b35f8e8dbb1a7e5eb41298762711e78fa18f53feaa4d0e592a67a57c29d88808160f4c20d881045805f5620bb192769f5ab89","ssdeep":"192:PzyWgd3Pjy3qn6fJ2b4b9mMJG8GJxFuCFRVWFCiwDumwAcPgYBA6heoYBnXc5:byjh+2b4pZo/ruCFXWFMD+jBA6hRYVc5","tlshash":"8352c028772e89dc0c7058c85a25dfd66231bcf10ae0211ba5e4f5d42cfe96492caa66","first_seen":"2026-06-06T03:00:25.319535Z","last_seen":"2026-06-06T03:00:25.610679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/Login/country_code","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/Login/country_code HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5879\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-iVQWM6DlDf9CuG3B66vbKi' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a6b6e7130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gah%2FXeMv6UY2B0tv8%2FXKOk4QKAOm9g9WOpDsnZ2Ckf25hdo6NoV9Iapmlm0yncTqv8B0VSPhM3GqxQjegJwUC%2FXjrhDBhq%2BALUNdxt6w07NHxqqW4ENgFUaNznWA0%2F%2FgBQhr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a6b6e7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_19.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_19.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=75574\r\ncf-ray: a074292afc78b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 153\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12736\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i4taR0POdN2%2Bg7gCRrySUgiQLmsKm9Om%2BRD%2BafR3GrXKYC0tk%2FmX3CIZt42GwysxOXzhKEI1p2Q3xo%2ByQOreqvnL3C5mddvpb%2BVIjUQsAOYpGiw2FdifNdjUrpKZTwOYkoW4qKLMgZBqfkPb\"}]}\r\ncontent-length: 65590\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5dde13bb2cf46a1b98592dc4cabab02","sha1":"3f2add8b8450b659d8fae7f8e1d4e751151bffc7","sha256":"afb3b0d0d978d409f329ff45598d6720209a05826708ef2a7fc07f2c9d942c34","sha512":"a78421963b4492ee650d68ffe3743db8536d1ed7e6d9b02f4ebcb80b296751532135f1d0fb6d6960231a81f2ad89b12569349cd2b4b1df91dd55fd4b3d338567","ssdeep":"1536:umXK2uFvL4KiFp+7ysoXgt8ol2ruaeHy/BiCJErCcwEJ:uj2uljiT+7ysJuCaeHypieUXb","tlshash":"d45302fb25d99296bc1ca88401799cd817f795eb88f34a1f07cdd4f2687f90ae442163","first_seen":"2026-06-06T03:00:25.298836Z","last_seen":"2026-06-06T03:00:25.611462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_30.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_30.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714765$j56$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5609\r\ncf-ray: a07429331d3cb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-15e9\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0v%2BJ6B4ustdeotDyBjousdzXJYMomhalcYEtY7n9xGt1SN22U%2F0%2BfUyFykyLI0oLUfp2IaEh4lvDts0Z5CU%2B28ycRcSrCkq3GPwDDVKl34usegxVf8VCDa0bwP%2F3u6HpfVjCe4B0UuWNRtA\"}]}\r\ncontent-length: 4222\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4222,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4b99b2352ee7fce8bd5755573410b8ab","sha1":"6880e1ae6aa35249aa4d5ec3ddf39dd073589976","sha256":"88c251d435290ca64e16ccb728a1221dc65713dbe50ab933b38d19523b17eb2e","sha512":"8bb993204c24fc67d96c5dd6a5742db3b3b2118e0c0d89b54141cbfde4978f6650db899f66bccc751950ba1b37b7673fd285ba19a7edff15d994f45ccec2c3d0","ssdeep":"96:Q4LouoKlkAXDNQuLOXPmw7aIwNNhiRNvtidR66zj6rwYxX1RHsLh:1ouo8kIDNROXeoXwNN8RNvcQ6z4ZsLh","tlshash":"d491392395d84dfe87ad1b867018a865a7302d1ad3f2f5a409dc08ddc8e2a8e8945d8d","first_seen":"2026-06-06T03:00:25.219013Z","last_seen":"2026-06-06T03:00:25.61242Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/theme/dark/logo_web.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/theme/dark/logo_web.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42532\r\naccept-ranges: bytes\r\netag: \"f102555c354e6857d7e2892cf8bee862\"\r\nlast-modified: Wed, 08 Apr 2026 08:10:18 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iSi2Jg2pvJ0EqG%2BJDdvUQ0OxWZCtA46o1WbwU9knJvmfIArLjm6QuDvtYBHE6nlU0sOX7kXc9iBUDZjCqEuURbjvjgZWNXprFZBdZbgjTx92tm6vQlNyMBf1tbuhx8s9DQb5CwirAojb\"}]}\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=77421\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 698\r\ncache-control: max-age=14400\r\ncf-ray: a07429262b0c56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42532,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"465acadac4a0002553e7ab7928c07113","sha1":"7176a0d5f051ff3c7230af35734fed3dd58d7d18","sha256":"3e38bb469abee96b3aa16b67848da312be27928f0c40e6f424398ac1b488d170","sha512":"319b95b1736cf6a52499cb88ab26ce7be900fd504a358bc4aa4b3ba59638b5a339243cae50c3f8be385b48b6df2f3ae7c798a674f12dd81f88b7a2f35b8d3893","ssdeep":"768:szBQ4OofuD6quuSalZWWv/PQxNqcn7hm33Pm2+HJyLepAsldaWr:sVkoBxaloWXPQvqcnkneUp6","tlshash":"e913f27493b8fa03bce4d013f105dbf4a4603828195d36d7d92d623a90abb03b5eee64","first_seen":"2026-04-22T21:52:39.504726Z","last_seen":"2026-06-06T03:00:25.408161Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/club_home/image.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/club_home/image.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 153378\r\naccept-ranges: bytes\r\netag: \"267aced8d8862bb0b3756026f9cfcd68\"\r\nlast-modified: Thu, 13 Nov 2025 10:48:05 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=177535\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(37;u=3;i=?0 1093;u=5;i)\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2FsXACfxnB%2BKD6Cf7Ve1jQAq5mtaBKQhlZjWXH86mdOA6%2BpmKkFxHGiVEjnXLR95SEvQOKci31wtD4rvrrSdcHx22rsCP%2BK1olzpTiU%2F5gnQWv0E%2F0yUPOgo6WUQ1u6N%2Bn%2FeK4ZLcqHh\"}]}\r\nage: 5721\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742927ab9256b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d970647a301e3881f7caafc28810b30c","sha1":"cb3e21624f3356d17f5e3d811e2dbdcbef54be6e","sha256":"1089f11f53f5000758dde1981de4e89c6b3065edab4d40824aa6c8562b045803","sha512":"c7948e8ec2ebd340d702693bdf1713e7862bb9eec7af39216117da327fb62d788ef8caed5578d0ecf30fed2654251f81b320fd7ae69b1d706975c84228f8aa76","ssdeep":"3072:RzR6yYwfvngd8t1DycWr84dhyn6U4QsKI45hRq9pgB4bWeak81Mh0KA9xd:P6yH/gd8t1WrhvQsKI45rZYWeaknbA9","tlshash":"b8e31297606dd1e415c1b9b3b10d367c07bb1a6982642b8d053bfb50ce3e631aa79b2c","first_seen":"2026-06-06T03:00:25.161711Z","last_seen":"2026-06-06T03:00:25.613254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_6.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_6.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=6128\r\ncf-ray: a07429280c64b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 154\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-17f0\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rm8L%2FEsFHw2RShA1oRiPjCaU%2F8JGjbTLf4cQZJBsLFIs7SidqHZ%2BvyjC%2BG58pPwx5YK94LmODPFp2%2FWQoYJyN0MjAn%2FiWy61xgVt9F2kJ%2BbC9WS3C%2FJsSQEq2u3AVP1CNomghzXOZL1p8YHr\"}]}\r\ncontent-length: 5332\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5332,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7980e21cd2b26661883088b7bf334c37","sha1":"a036fe0c8aa4b73657baf9cf3abc2888ff02c698","sha256":"4448e89743a383186b25c86ccaf7097465b657156e9eac6f0584257b7655c18e","sha512":"22470ea8121a4aaee8e80ed476dc3220f80cc13cb7c4f3610d013163dafaea4d625982f947b0b2313c2318cfab35b490ad7896c03183c20c17c4aa45b046dda1","ssdeep":"96:MOh4/1SGj/H28I8Hgnsvcr8GwKL7UZUZaOEGzibXxTxHG68CEhtmvnwEBPm:MrtdcENvs80PqUYXpxTxm68CqSnBRm","tlshash":"f3b18e567fa5d2078aacb2dc257556050ac5ce8895d2da6437abfd12181082bf3c0ce2","first_seen":"2026-04-22T21:52:39.8732Z","last_seen":"2026-06-06T03:00:25.614135Z","times_seen":6,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/common/get_sign_chest_default","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/common/get_sign_chest_default HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5934\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-eH2uOe5H1acpzASIiBXxwk' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a6b747130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FBJFHTAxb29Fl%2BW9uNogVU4wV3sa8KZyMDoyfOB%2BVszITXO2fNyJhuvqrMqf%2F%2BEhT8S8MjFdvMBF%2FHxWvcmfMUqHs9WKb%2FjTlPlgQ1YscSG4dqdh%2BFOitFM%2B5aRPRYbaTxu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a6b747130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_4.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_4.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=1801\r\ncf-ray: a074292d6cabb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-709\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IIBkwD6fodu6URHpz6fZLPyi1ElPoAoxibbBO8iLnovkdLImBJ5FHhgRUNoy4WH%2BoetrptJR12zHFvbcgZ6ZIUYGInk2ggtR06QkPIGfPHBfquDnkk3uj1F96leIfhbqcJfyqQ1cMpNO%2B%2F7O\"}]}\r\ncontent-length: 1666\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1666,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fef723dfbde9da643c3211282272da2b","sha1":"54a58a1100b1275789a0b15bde057527ab5aefec","sha256":"e831de4e62af4353bb95733fdb5a95bf92dc75de6ab5807b8348f1428e4fc4e5","sha512":"a06e46f261205aaf0e66b281a1d0c7fb17aa10c650a8cccdf8efe669d13ba0f740b23c76d5764c4e817632489533f548dddd774302e5e603d230f41cdd12ed04","ssdeep":"","tlshash":"2731ea37a3b49771ecc519b59edb22c555534f4a503f502e4e39570ca207900efa97c5","first_seen":"2026-04-22T21:52:39.988753Z","last_seen":"2026-06-06T03:00:25.61477Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_blue/images/seq_0_3.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_blue/images/seq_0_3.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=69582\r\ncf-ray: a074292d7cb1b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10fce\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S6xQemG%2FxkiBA3yMeHW31eAV72mR3vWM6VYmUsxCFtWLedPTaWCJEns4XR30wGD9SE9EsoF1Z3b1Xzz2b6sSN1Uz3vejwl%2FX%2BhJ6OPdf5wRv%2Bf8Op4IoUZ4fGx3Gk%2BeTydMO0lTHExSNvFTS\"}]}\r\ncontent-length: 60080\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fbeb4a8565c16b4cef77ec33000038f7","sha1":"a011e648667b115154c6726c84a1952989d3391c","sha256":"1a424e7eb6858129987295327fadcbe232e138d45fe49226e7091836aff3f5f5","sha512":"2ad5880b1203f10872efa0f68545603e0b202bbd483dd080494b4e3c46d802030d7f575d60173a42055adef24c2e5b389def59272a0acd4a0b22b64f63a38729","ssdeep":"1536:Iyh2W+HtNX0zay6WH2Oem6IMBvwPqjh+/S:v0dX0zHHr5MVoS","tlshash":"55430281caf82c4f89e8b312e19f0f57a3df1eca850f5ddadd1b5486e1b2258c071a65","first_seen":"2026-06-06T03:00:25.064757Z","last_seen":"2026-06-06T03:00:25.615416Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/static/css/2190.36499721.css","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:22.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /static/css/2190.36499721.css HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ot8PKs%2BcP3fPPrHm7haHMNGGhnIWhWQt6utQcewnjVkniGyTSu%2BO6%2F55MX%2BH2k5%2B1IkufKLrP7i1CoF5iyNvtubjhKc79aXi5x0Ns23DpxDQZSaRMnb22%2Bqwle081GHUH1AmqB9%2F8gUgqIOM\"}]}\r\ndate: Sat, 06 Jun 2026 02:59:22 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a07429236c30b517-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\netag: W/\"6a1d3e4b-4d05\"\r\nexpires: Sat, 13 Jun 2026 02:59:22 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19717,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19717), with no line terminators","md5":"d031487dbb7c2edd2f94ca9b7e64334e","sha1":"d24837bbc64251817217b9657cad99c0aa5c4785","sha256":"9df6e1090e0e3c3b26550fe98eddcfc672793568ccea5a1ce608dc3c4759ed0b","sha512":"3c3a1186a2e1408d3f8beb9f9cef45fe2613cbba8ba006f9b37903d469653b40e4504ef1d53b5cd9f9d539bb3e18e83081897c8dd81c11840c91a661a1bbac65","ssdeep":"384:/2W6bZSUDtIR5iemqnoMlfiu78UNj9HiL/8coo1SyfRG2DIaHj8ANu6fxeu7gC3c:W1LtGlT","tlshash":"d392db12725d4524e837d282d4e1776f3994435b814207faea363fb7cb0bacb3d61a86","first_seen":"2026-06-06T03:00:25.449113Z","last_seen":"2026-06-06T03:00:25.616199Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-resource.galabet.mx/web/galabet/imgs/new/Gachapon/bg.png?imgver=1.0.36361sssss","fqdn":"web-resource.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"172.67.71.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"GET /web/galabet/imgs/new/Gachapon/bg.png?imgver=1.0.36361sssss HTTP/1.1\r\nHost: web-resource.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 168276\r\naccept-ranges: bytes\r\netag: \"8ec21841d4d3070bd6386b7b4ea12430\"\r\nlast-modified: Thu, 13 Nov 2025 10:47:12 GMT\r\nserver: cloudflare\r\npriority: u=4;i=?0,cf-chb=(37;u=3;i=?0 1056;u=5;i)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: h2pri,imgq:100\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=188710\r\nvary: accept, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FzGOZzosTXa9ciDNN0KVo3qd4JU4s4vT6V5TYkHq2uGTioye2KrqwEnmyNl4CrFbOwTDcyuzZlpf6V7mwnNDnAVfuYRQMvFHN0IpHa4bDl3xI5hPsXznqlppt8%2BbzcDmeQhK27eF2X0s\"}]}\r\nage: 1784\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0742927ab9b56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168276,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7f517dfdcfe5b3c18456a45a0330d48","sha1":"470db133cc9d6506dc7343b5611cad0746564d9b","sha256":"ef5289a369f1341310510468a7cd8d284564eb62ad49457bb9726f693688d44e","sha512":"9f89dfc3eb587ac6a1aab4b28ed1319a66024277e2d202298e24032ce9e8be1da14169c5a5dab3383f0773b14e869ee369d8292e2dcd8fb0acb6e94e4d2f90d6","ssdeep":"3072:w+/tB8KHbfMfcq0InjrGEsOFpqT2GoKT176gBg5cm3dxwJuQ0d2:lV1+cqVj4OFpqNjB23TwEQ0k","tlshash":"56f32302c5a3039f0dfa9de562116f179db68576128e9d36bf64c032900d1d64abd3fb","first_seen":"2026-06-06T03:00:25.114588Z","last_seen":"2026-06-06T03:00:25.618827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"web-resource.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_29.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_29.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=75318\r\ncf-ray: a074292c9c92b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12636\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B4ftX2fZsNt6pU%2FuT01La1Ma9uOV9ZiVqniw%2F4Q6oKtMnCbf79uXhG0M3EbbVhWiBZEcZdFnfLHevdDDDJwLJOagSFg5w9upNojlAgvGv%2FA26wS0QSzSiQ4KUmJhvZcyXNUG7OKZcwLySt06\"}]}\r\ncontent-length: 65250\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65250,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ef5b6074e0548594635fc01f88de711c","sha1":"25ad461440387074181c3cfe7b370a21e5a6ba11","sha256":"333fa17e24368b7bdb4fc9ec58e0e6e207a0262fefc4f723cd691b92951f5563","sha512":"99490b11c99162c629b6e462656d24ceca11acfe73c59c5c304e415c43e781233c0490d577cb112c28505ede1b80352b2b2d671deb0177f491dfe8506bab972a","ssdeep":"1536:WmI3CuAmKsEA8biQPFa5zmxsg8mhR9zMy3SgjPBEwEkhDXIQwMZj0r1Me2Wjh9y:wCu+K8bTPFXf86boBL+Dbx0r1ESi","tlshash":"685302c8cadf99a78c776b43cc4188ae114df434460cf89d2a69c79df8f52a90741dda","first_seen":"2026-06-06T03:00:25.334915Z","last_seen":"2026-06-06T03:00:25.620431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_13.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_13.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=3958\r\ncf-ray: a07429301cf5b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-f76\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5lqVvuoe%2FY9HRu2TYtnzQKeqWHMqulU23djYkuA9FQDVX05YBDjVMYDmD9YF1S1trGM0BE3KjZRLFWB7RHgzph3COiDu8OiwL4nR8EltaMTKhFRrfa%2FvB3LPP6aBmrEqiEHrHUn4r2PBLic%2B\"}]}\r\ncontent-length: 3194\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d1e2a1507d8a8d1ffcd5d95ee2af305","sha1":"4454c08eb1ab72dc7fd799e2d56528ac62d7ee8d","sha256":"42b868882d47b53e2f826870ae65e82571a08d82f7312810cccc297614079a43","sha512":"84fec88d56f8a3ab9581f871865f2d42627aa9dbd83e4d12d644c9dd70b2a43bd6e6a9c80dcabdb12cd1937e634856566f2e8a20fc2477d887a3ca74bfec7998","ssdeep":"","tlshash":"5e616e80adb1fc25bd0003841299970afc5dd747015be1bf5170c93a1fb585557e195d","first_seen":"2026-04-22T21:52:39.593842Z","last_seen":"2026-06-06T03:00:25.621373Z","times_seen":6,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_0.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_0.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=18183\r\ncf-ray: a0742930bd06b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-4707\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b01NrPU%2FAMBBzL6L6kSfb0hID%2BQ2yJyTEY1u2kIHN6rmK%2Fg3bjSW0AByva5N4VTyMyOk7PHpQunbLBdyGyJhMYN1Z%2F2UZ45lfQR8FMwGZcXRZcMSUsv2hQruQoZTslB%2FkaVmYRK7mCl0Cc%2F4\"}]}\r\ncontent-length: 12466\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12466,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2e91a56fa54f4a45266003d0ccc4c121","sha1":"0305719f33bad53df01307ae976cdcd10106a06a","sha256":"ca324e28b83a30041d813b10b12a1d92fcbf96b61fa2756a268800b441605d15","sha512":"6a38c2d78526b5015f874a413203b21d1fd1ffad39c7b170b624b01b65ae6615aa9d65f5e2fe9f5fd0364acf5eb7742e0f1d5f8011599192fe1e64514e6ef747","ssdeep":"192:agJzrc4YTFdMm2CoQAz9EQ/l0mqP+ZTWcLVt96ARIRI7Hof/:aOv8dMmpiKKxqP+7D9KI0f/","tlshash":"9d42af57e0ae27b939083f81349eb7bf1310aec7e997bef9108f5071e9219091665387","first_seen":"2026-06-06T03:00:25.340033Z","last_seen":"2026-06-06T03:00:25.622116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/auth/index","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/auth/index HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5834\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-pDrZhao9TZ8PC0xPpoaqa6' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a0742932ddca7130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gepkMs1iZsxlJ3dTgE0UjxxyrOnvnhO4AN%2B69GUclxkePr%2BLL%2Bz6gA%2FwHy%2BFv1Kfu2Y4lX3NuhfKoPoWKZS9iojaWNmwX8ApWQeOJi2FdXVX%2Fw1KJbJemQjvR%2FO262RI7ZX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0742932ddca7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx3/images/seq_0_16.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx3/images/seq_0_16.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=2072\r\ncf-ray: a074292e6cc3b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 151\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-818\"\r\nexpires: Mon, 06 Jul 2026 02:56:52 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SgMPF6Cgw2CXJ6cuaS8Meiy22PJtpzgo5TADQwbuOf%2BJqKbZNmsLJhYRiA46xl8nmWZoR11eEEZULZB4WLB5tpHI%2BOoezVBa7YPowQSwE%2BoxG52kVbmWOUaCkhnwanTyZDzDQic%2B%2Btz4TEs%2F\"}]}\r\ncontent-length: 1928\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"234d25deae85b529022c92057b4b03de","sha1":"b6e499378f84ec17da0218fb646fbd261dcc387e","sha256":"befff41588c9d53a46ccdf4aac53160f342ecc63e830e802dbefc2ea2f0687e5","sha512":"c279669969f1cce558a4f1567cc5a259493a1e344083ca9e3428f5f1c049bdc511c804bf937eb8c4bbec8e3913fb1575ea9e59bb0148f4699e985fc3c0a3c3af","ssdeep":"","tlshash":"aa413b3396935ca4dce36f91070a4f4b42501e28524dd8f0fc17e04203e85126e8fd55","first_seen":"2026-04-22T21:52:39.855429Z","last_seen":"2026-06-06T03:00:25.622982Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_1.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_1.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=28029\r\ncf-ray: a0742930cd09b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-6d7d\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bTlSpArhrvTZYNBSLNGNlClZ%2F4bKL8RJaJvxS3hDxplAAw0abpq1MV9%2BP9wVp%2FR00EXXDmf3B2Ta0kUMIjeugGCKiJd1euTIw9fGO62N5U%2Boe63%2BlLL%2FsjoyAU7n%2FbwjO14MNA%2FjuhK8qmDa\"}]}\r\ncontent-length: 20982\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20982,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"81e9089a530eab31dfee7b77b582270b","sha1":"25bd773a60f472e46f8c1fe21f4df64e1574d0a1","sha256":"d4952edaec93d3cf1999aa7430157000f22aeb5763e54eb05c5ec6313322ff83","sha512":"54b3359bae9398d700d8e18540a64ba22ae9bf4998210b1ae2638dacc9ed12af3a5fa787d7d4d6491ed28c6fa41cdbb3cee36b3fc0c4237abd989c1742273ecf","ssdeep":"384:pxWYzgWIVqaxMuT02EHbIbS14ri90qqzlR4BC/JQQDGwNoNS7HsGA/JKp:pVgWyxTxE7IbOIi9FinJQNw9MGA/gp","tlshash":"b692e0b084621391975457dbcec25d33397249ae430247fa1abc1eb53feeac18a37d42","first_seen":"2026-06-06T03:00:25.562915Z","last_seen":"2026-06-06T03:00:25.623614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_1.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_1.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=79521\r\ncf-ray: a0742930cd0cb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 146\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-136a1\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ajOkr4pNV1rn6WxapT5ERlCNTgKFxZ4v0syKYZHBArONukdkbLton6K7B2zvHyGJRjNeMqp0hmJlR7mNXVuX1%2BzaM0xBkt4gxkNAy1WExHhg2JCO1o%2FSg3CtK4BDA3T276pfKmi2hvleo6cT\"}]}\r\ncontent-length: 69576\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69576,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25cb1b6aad36eb166712f4cd314ff1d8","sha1":"cc8205b8829a7f2da482204a61e127f1f7ded4eb","sha256":"dd50e186f15804ca555d3ff1876aff1be984430dd93b09f2c5f86676a6064f7a","sha512":"9721f317a00a222b82a2780bc8d0803ef29bd1b4c9787ab02179b27cee00e93c825ff1fbfab0a454b865389457d6d7f654980b285890d4329770f27baf51d5d6","ssdeep":"1536:YHBQqx5IoJJRAZLu6nyEcAPoACLFTqVcmeS52EWOzZ0pgoNLGM:WBQQIoJWSLEwACpTqVPqOd0pVVGM","tlshash":"fa63029c5ad53a70f33f6f1b379620a4bea0661759d0603096ee35b37b104fad02c6d6","first_seen":"2026-06-06T03:00:25.06117Z","last_seen":"2026-06-06T03:00:25.624422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/lth8spdw","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.80","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:26.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"GET /widget/lth8spdw HTTP/1.1\r\nHost: widget.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 3166\r\nlast-modified: Fri, 05 Jun 2026 16:45:10 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: Gra.MpbX0DBHKnBavzQllTEYJCN6Wgeo\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 02:58:38 GMT\r\ncache-control: max-age=300, s-maxage=300, public\r\netag: \"5f53f8208c0d62efc8703fe3e9d3f06f\"\r\nx-cache: Error from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: x9eMPzS9drqws_Hp2jgYLDhEEqJtt1G0x8nOg5hHDUtQ5TvcOozgaw==\r\nage: 63\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7614,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7614), with no line terminators","md5":"0de1bec84eecf92d617ff4ba4da60b64","sha1":"9852d02d0136bb961766879d14ead7c78218216e","sha256":"8d51400ff2f22f5ea3f78422d87d7f2cad2d47f9b6a5dc373a5a8c50466ff9c8","sha512":"ab4c043afda0d320ab218d03804b081548ab5484d9c969c692d0dc071a81f2cb45cb4465a3294cf303f347b064ed96857b57aa34eca13d31bad138c31ea1dcba","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0FfpvVQizfDsJeiMw938I5Zv1JVqUP:v2YVNCH8bMFOxVQiMMiZ935pqUP","tlshash":"47f174feb6c2793806a31576623f770c7e3b654528494490d066c8887a7adcbc12bfad","first_seen":"2026-06-05T16:52:44.999405Z","last_seen":"2026-06-08T08:04:32.209526Z","times_seen":584,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":4,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx1/images/seq_0_4.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx1/images/seq_0_4.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=5923\r\ncf-ray: a07429280c62b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 154\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1723\"\r\nexpires: Mon, 06 Jul 2026 02:56:49 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jVc%2BhGQrJtkBP3xFJaW9yHs8H80gJqdGoN%2B99P1iBi%2Bu6XwLL5Ba19wlOax6qH4M3koSnmkjrog6YV%2BdlxbwtKDIYLe0kmxhuBGc2U60zvQvyvpzl%2BmIhNx38JmXq%2FfPVsprSF9scCxa6nqP\"}]}\r\ncontent-length: 5100\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f790bb2fb6888e6bcee08665dd434d00","sha1":"1361ded798f0076ffbec2586718415c82b2de95e","sha256":"6b9c386f2df15575709d9f2dad7bbb6390e9d1e1f2ad5543c114c32eac47e79b","sha512":"4265160fd932d8bb8d4863423712bc5e11dc3f5592071debd028de265a7459f741c869077c28e2ced52dc2d4e0f6fa6f0af5b5679edcf2f8024692766c0c3f6a","ssdeep":"96:lsNJbcwod25ByEau8uEPlCWc2XZ0tAqe7RRmanRPZPivEfktq/B4PhYh4:lsNJbcwod6ByVK2UWcPAJZfcqJTO","tlshash":"d1b18eb7d7c0885c0ab49f4739594f7221b6d9e172a0d3aca29d4084c466aa3f18af08","first_seen":"2026-04-22T21:52:39.784773Z","last_seen":"2026-06-06T03:00:25.626094Z","times_seen":6,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/bets/pay_push","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:23.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/bets/pay_push HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5864\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-62t7FBhCdYNRT1PfaOSOer' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292a7b7a7130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IlahnjrExeX65lSKqgSLhSDpCxgwPdRRqlTZAx8ZRTBpGVf31y4Eb16sQOPNhnmuL3LT550ho0RPiF%2B3kOU8HHgmxWV7t3IaIuHCYwroIuCSU8Z3mX9ciBIk7guSuquCau24\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292a7b7a7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-v1.galabet.mx/api/Gamelist/gamelist","fqdn":"api-v1.galabet.mx","domain":"galabet.mx","tld":"mx"},"ip":{"addr":"104.26.5.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet.mx","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 08:49:38 GMT","end":"Sun, 12 Jul 2026 09:49:28 GMT"},"fingerprint":{"sha1":"91:65:77:28:EC:20:F0:5E:0D:29:B0:59:6E:6D:3F:A4:A9:79:28:A1","sha256":"4F:DB:3D:31:38:62:78:9D:35:BC:6C:78:F7:55:75:89:97:49:E6:3B:E0:44:52:9B:D4:62:8D:3A:B0:AE:AE:69"}}},"request":{"raw":"OPTIONS /api/Gamelist/gamelist HTTP/1.1\r\nHost: api-v1.galabet.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: adjustparams,aid,clientid,fbp,lang,version\r\nReferer: https://casinogalabet.com/\r\nOrigin: https://casinogalabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5876\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-cLpw2wCLN7btsKWnO8STRm' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a074292b1ba97130\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDYzLom2u%2Bj1R9DIo5SBWnbxuTFVcXssni6D6AtEgXaXrCgbSD6JZ78cQRN8f4MkJCPOV0UqZ4WhTaXstT2GwiOYQCymANzPXZCmNxN5cULKWwiGX7aQwwN47Fzmp%2FBkFWa5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a074292b1ba97130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api-v1.galabet.mx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_4.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_4.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=67772\r\ncf-ray: a074292f0cd4b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-108bc\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifgun4M8zHhejHNhTQhXTEMLddziu8Cd3I3hPzF0a16wwRwPRD2N8gtZXjhggNhxjKXzFk3qOFl8FcHCj0I0YJ4y3JJoKhTRoOtCpAZQbPfNs6xkR35SWaKt0A9xiGigzbx9s0eFtVIlpEMi\"}]}\r\ncontent-length: 59130\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59130,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"003bc5ed01a63e3748d473fa9a91021d","sha1":"145df64dc9a19b89e97f8851d40f7f96404c0ba4","sha256":"e95b0af91a6cbd1817c66c502d26a0dfdf83b00c3709f2e4a3c607d5ea14e395","sha512":"188d7d8e25da6258afacee8a24265b6959d9ee3b6a4d04ca044a174fbe119cbdab5dc631b1e531687952497ab443e4f24dc4fec17f9b6450ca9f571ec58493e7","ssdeep":"1536:rxSx13SPklBSyvu04Y5r4tENSSwdL27JJ3gxlU8Y4H:rxCCPSBSyh4Y5r4SNbwLovgsH4H","tlshash":"9c43025d61906278b3a1d8f5e65338c283bb8918467b70e711ce50e3e91c6be7432fd9","first_seen":"2026-06-06T03:00:25.167155Z","last_seen":"2026-06-06T03:00:25.626757Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_1.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_1.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=4647\r\ncf-ray: a074292f3cdcb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 149\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-1227\"\r\nexpires: Mon, 06 Jul 2026 02:56:55 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QhbiW7ZQW3vniorYAhKWg8M2wz14%2BFpnwzNYCybsukIucURw7YoYj5rCfqADP6lwDGANY1xgtG%2FLzHbLzmGpaVQiDpMoHiIVqWYHWErVUju54JNEY1rZevXc2XyWjNinfdhsfv6b0HWq966n\"}]}\r\ncontent-length: 4212\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4212,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"015f52177eebcb89b3c159231bcd4793","sha1":"8296a25318e3730ebdec2fb21cdf78a8f0a7de88","sha256":"1fa25952fb1c88dc5c818be42f6be98eca94c32cba35f9912feafa0af2e54ee1","sha512":"f0c61f8ca9daab4c5fb952fabd7a4079131450ceae3efc7ac953d83c1faa2809a8c4e6136133f9eca4dd6e5a1cacd5ec866db38cb263e066c41dfdf044e6e446","ssdeep":"96:lJjFWh7O3QhSCXmRjW5sn9C5eUrPqCPBuwzNIv0TR8R:lJpWhK3SHXzu9C5eUrPzzzY68R","tlshash":"f7917c68293ee2edd57b491dd6b0b3ecafb3cc44e941a502218c98e2805d657d72a380","first_seen":"2026-04-22T21:52:39.537935Z","last_seen":"2026-06-06T03:00:25.627557Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_5.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_5.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=3160\r\ncf-ray: a074292f3ce2b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-c58\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G3dcWZNN5THQ8atkHofud2x6QT89FfH5q7c8KSJhnZLmjxoM0e%2F8hHIy5bDGqi4ghYxvvSnV7Ps%2F9NjpVgqXM2y8bgdhtY%2BrvNfx4ca2%2Br%2F53gkqNsd%2B0aVCUArdhs3Uvpt78lHFM%2B5eRdRY\"}]}\r\ncontent-length: 2556\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5d655b23350788df69208e6418da0f7","sha1":"d7c71ecee0247c66f97aafed30db5f7bbd7e3597","sha256":"e231723dff5f260314cd3193c1520970ec41f7cc7b37c1822de0583432cf30aa","sha512":"fc953209655553a18a762f8b2a85cad70e0f44bce4a52aeae47e952dcf993927dff0d26174d55c79138a564e3c9278d498284533d8c8d3df9289edae7880e8b1","ssdeep":"","tlshash":"e6511a047b6bb6087509c82bd1d03d600c99f25133a5c324ccd63a6f1e4c0a6e16fd7b","first_seen":"2026-04-22T21:52:39.836696Z","last_seen":"2026-06-06T03:00:25.628177Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_7.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_7.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=20566\r\ncf-ray: a07429315d15b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-5056\"\r\nexpires: Mon, 06 Jul 2026 02:56:57 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YeWca56Ld0Kw529jD0%2FMWK8darMVecwj%2F3G0iDDZ1YMcjdXXDipybb9uhr9tBjPd5JQKarV1yv%2BwEzdKFIXIxN5n60z3%2BvQS6U5o7HVEZiZ%2FeOGYCGw4GFaSr8Cd3YX6MS76OKVtjsmgMU7q\"}]}\r\ncontent-length: 17118\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17118,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb468ff17f52503ef49a00a013b8470a","sha1":"9f44f4bf17e32b7b9de18fd0ecc82c19ab9933b4","sha256":"ee15afecbaacea04b7d48c7407a942936c7f136f3e047080c67d87bb2aea54a3","sha512":"e79b0a1e5a55437561e83d42c56f1c7004b46f2187501ebfc9c4abc5b18e767fcf3244f64b275d2af9693b3b919f7228c40bdd3f892f25b6aca03a7e9fe07a44","ssdeep":"384:hW5bMe5fkXFGeeZQ/WhdDR5AHQJAts34mqETY:iMe5fk11eZQehdDPAHQJA4DqUY","tlshash":"9672cf31d86330b7c3216a68722b92a7ec65cc718403e86622f4aee57a5277441cffdd","first_seen":"2026-06-06T03:00:25.076017Z","last_seen":"2026-06-06T03:00:25.628766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/comp/images/seq_0_24.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/comp/images/seq_0_24.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=77338\r\ncf-ray: a074292c8c8bb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 152\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-12e1a\"\r\nexpires: Mon, 06 Jul 2026 02:56:50 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RBi0sPEaiI9qp8QL0DrD2AYtHzguuTmMgUgDTIj67rdYEPjvXgrcCqV6W3JOs8X%2F8HWWBR1Sf8pgK8oW2rmqeCBU8tkQZHc9dEvvQIhgQa0JBMb5yT%2BzFgyAWkx1iuX22yLyin6kIScjgtUl\"}]}\r\ncontent-length: 67260\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f8ab55b0a8e8a8dfc571287961ed118","sha1":"28f490bafd8f431a6845b9fa68eb764f1f1486ea","sha256":"77a18c48830913e0d458a585cbad6091d36c56cb73cbc16ac8fc920479472df9","sha512":"7a932fcad206c8da03f608637a3c046815abff7a4173f512651e230e493d6d2fccd63604e4266347cb49469b39aba6a0f4684faad795d3bf58c5c90f4df94a2c","ssdeep":"1536:Mb+sUBGNrymxd9+dj79r7l2mmjaTGJvctbBt/V2HPs1k:Mb+sUQKJfmjkGclt/wHP5","tlshash":"6d63028967c5b27c9c2bd2e442e1f560c82bf246277e70b66d419f3c1a548ea7f0036e","first_seen":"2026-06-06T03:00:25.232412Z","last_seen":"2026-06-06T03:00:25.629561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx4/images/seq_0_4.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx4/images/seq_0_4.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=4848\r\ncf-ray: a074292f3ce1b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 148\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-12f0\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EVYd9CytYJAUyEmSandJJo0U%2FKN5mJbxvWwr9QYYvVld8z9MVG3QdghrrVJ4fR4MFWj%2FVrH5SMi1%2F1mAcEjWC0Monf6sbTLb5TU7j%2FPeNFbjlf0ZFVKA6IMI58o6VEkrUaRzOqKa0fCtp7W5\"}]}\r\ncontent-length: 4030\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4030,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3db246c42067c34e58fef5aafc64e202","sha1":"3d8fb0bd38141b0af9b6bf1aaef2a73adba0336e","sha256":"6106b7bb81dbb85ca7753f4532f89fdbc691d229fa76025f30bdbb9109d813d3","sha512":"c9d2d690b97aa7b01893a2262d3a18cb815c95b647eb4f9af55cbdcb8f37b9abef985e8f7d974ae8ad6fa0e9eeb2026ea0f5ed1643163948b23e91730eb99a8a","ssdeep":"","tlshash":"0e817e0d184dff0a95a37f6c2bef611a283713cd5d03a49eee03f8425690565b394029","first_seen":"2026-04-22T21:52:39.813239Z","last_seen":"2026-06-06T03:00:25.630353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_null/images/seq_0_10.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_null/images/seq_0_10.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=66282\r\ncf-ray: a074292fcce6b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-102ea\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=II1C77Oz%2BBpmBAXcIcmKD7vxHmINElsgrtFbePrQhHBiTSS3aUn7gS3t%2ByyovM3nL3iteWFiGjrtAQuBsyltHvM1qRpTwdHL2lUNHmXwJhpXw90euMI0Vf6DvZASCmLMIANyBy6II7W%2Bbsdy\"}]}\r\ncontent-length: 57216\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57216,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"49db8b9e08a59176e2f33b2e8a6654ea","sha1":"28bfa620576818f0f2669a04bfd18c1bb32725ed","sha256":"1a7b2a376a04826937324c03d298c7ac621935488d2616b7b462a07911d09884","sha512":"f268adbd50d1ccea1608df5a5dcdc68a286ef436c460590e05ab19d2b32ae13e23868e187c92e42e1304d5d70e4254854ef42dd8777a767806cf629eecd100c8","ssdeep":"1536:1VXeliA+eEU0TQVFV5Fu3oIAsIRy1Cn79:Turz0TQ/Vzv01c79","tlshash":"23430272c853193f197ae7555aa29fd45a44ab1a33fa84aedd70df620623710290cb33","first_seen":"2026-06-06T03:00:25.106775Z","last_seen":"2026-06-06T03:00:25.630974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/CollectVFX/vfx5/images/seq_0_5.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:24.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /CollectVFX/vfx5/images/seq_0_5.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:100\r\ndate: Sat, 06 Jun 2026 02:59:24 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=30333\r\ncf-ray: a0742930dd0fb517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 147\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e49-767d\"\r\nexpires: Mon, 06 Jul 2026 02:56:56 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:45 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h64gwuFCAv83LtcbNTqNyNFZFswxA1FNS0Kj4AsJseSvZPGFUu9%2F2gOP5SfvrRWYqNdN8swrgR%2FlXeyQPN0PaR0SJorgt6iwIsJG9guCBRpmp8Jc87iEl5qiM49MXYx0hBbwsHlK1bivXpvz\"}]}\r\ncontent-length: 24272\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24272,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4fa8e37f70df6dc4cece70b09473151e","sha1":"31af29e7e618b137fc3ffbc05652eb34e713a4e8","sha256":"1016a9c578abb545adbf4872efcb27f8088927ff7b99d920fcbaf7c4096f95c1","sha512":"00581e8f940beb5c025617716ec66d3aa70d896d8d2d69e54fa5d7d3140bcba2aba828ad9a5aecd81c694954e7d6372a11fd6493687bd2d0273dcdc99abdb67a","ssdeep":"384:k/CgK5JAXeOPxR2DsX6fTpPTTgr8rfBSTGw/CWSl//fyLbAhq73vabvZWh0q8:k6H4XeOj4C6flPTTgrifBSTGwz6/AKq4","tlshash":"3cb2e1f5c373490f123066d75b4464a5c322ac288526e5af5cad69a2dac37ccf8d2323","first_seen":"2026-06-06T03:00:25.039939Z","last_seen":"2026-06-06T03:00:25.631698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinogalabet.com/es_egg_v4/end_yellow/images/seq_0_8.png","fqdn":"casinogalabet.com","domain":"casinogalabet.com","tld":"com"},"ip":{"addr":"172.67.190.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinogalabet.com/","date":"2026-06-06T02:59:25.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinogalabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:42:28 GMT","end":"Sat, 25 Jul 2026 10:42:26 GMT"},"fingerprint":{"sha1":"93:38:68:F5:E6:78:10:2D:E3:C0:5D:83:AE:B4:1E:F7:48:ED:BC:E1","sha256":"3D:90:E5:C5:D5:C1:A6:10:90:52:8D:32:C2:AF:01:52:0D:BD:13:B3:69:B0:F1:3F:C0:F7:B0:56:B0:20:6B:95"}}},"request":{"raw":"GET /es_egg_v4/end_yellow/images/seq_0_8.png HTTP/1.1\r\nHost: casinogalabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinogalabet.com/\r\nCookie: _ga_P439F1TYT1=GS2.1.s1780714761$o1$g0$t1780714761$j60$l0$h0; _ga=GA1.1.745458707.1780714761\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:100,h2pri\r\ndate: Sat, 06 Jun 2026 02:59:25 GMT\r\ncontent-type: image/webp\r\ncf-polished: ok, orig_size=68767\r\ncf-ray: a07429316d19b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 145\r\ncache-control: max-age=2592000\r\netag: \"6a1d3e4a-10c9f\"\r\nexpires: Mon, 06 Jul 2026 02:56:58 GMT\r\nlast-modified: Mon, 01 Jun 2026 08:09:46 GMT\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KpwcQlahtMIRlW5brr18PIwlu2tFJqFQnIX%2BKW2D%2F%2FX9sBqtnWA%2FPeLk1ydSnjHSgxe4V9h%2BuFTv1lYk%2B9L5y%2BgunRTL1MQmkt1VXBaS3P9HDIuA%2Bt0neFHhg7W6JdQZYiR1pK2rCJ%2FCDz%2Bk\"}]}\r\ncontent-length: 59900\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"63dce54e648f0b976b910eb809109691","sha1":"61f590db94151fd624e1462934aebe8f2db407ba","sha256":"86742b2f4597fd68ae19ac4bab0be6fdceb543f42526ed9ef6892a5fd72dfd86","sha512":"022ecf09dbb2fcb839913deeec67b6b79da896f07ede5ae06d7ac2b907c47d3d694ae8ed10fe0443b13f6f7bc01488df90a5e45d24832972b7bc7b1d2cdd5608","ssdeep":"1536:TbyfCatKKTyFfcqTHGdhW9ZknDaNrjzVMF3IX:TbyfBtd3fqZR9UIX","tlshash":"4243028d542e7a9c5391e3a7e882d8d54cbbf1bbd9207596cf3608b1d00ce99275cd23","first_seen":"2026-06-06T03:00:25.426758Z","last_seen":"2026-06-06T03:00:25.632415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"casinogalabet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"casinogalabet.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}