{"report_id":"74f61c4d-0b39-44d1-8555-5ec333769bfd","version":6,"status":"done","tags":[],"date":"2026-03-02T14:05:19Z","url":{"schema":"http","addr":"galabeton.com","fqdn":"galabeton.com","domain":"galabeton.com","tld":"com"},"ip":{"addr":"104.21.5.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"galabeton.com/","fqdn":"galabeton.com","domain":"galabeton.com","tld":"com"},"title":"Galabet 882 giriş adresi - Galabet 883 yeni - Galabet 884 güncel linkten bahis yap!","dom":{"size":43872,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20270)","md5":"c3945465fb22256eaf8aac6f379697d6","sha1":"b356b7fecda83744ddef5d81d9d3ba2305c177f7","sha256":"8d37505c802cef24a9fdadd2dab36019272dc4111061e711ddfb371fdcb290b2","sha512":"8c25a160fa3e1300c9c47f16119f18c47e2bbe88391947871f2783fef8974ce1d1c1fcb515496e7e6156805fec83290e82a8879bde3b9e2b935e1165c3657a8e","ssdeep":"768:NPocMtrkSim0bXnQLNPZyBJri2Ee5w5w5w5w5TDMEwxIkf29YFts/Sn1p76:NQgnQGBJtl5w5w5w5w5TLwf2otr6","tlshash":"231318bf6364483e1b271784d056310d3e3264efdee6c884e796eead6074db16921e38","dom_hash":"domhashcf1f40ff07ed5ca45214e611f9a5238b","first_seen":"2026-03-02T14:05:34.908967Z","last_seen":"2026-03-02T14:05:34.908967Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galabeton.com","fqdn":"galabeton.com","domain":"galabeton.com","tld":"com"},"ip":{"addr":"104.21.5.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T14:05:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"galabeton.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"galabeton.com","ip":{"addr":"172.67.133.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-02T14:05:19.856532Z","last_seen":"2026-03-02T14:05:19.856532Z","alert_count":24,"request_count":6,"received_data":400712,"sent_data":2871,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":2,"received_data":72368,"sent_data":1142,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"galabeton.com/","fqdn":"galabeton.com","domain":"galabeton.com","tld":"com"},"ip":{"addr":"172.67.133.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d72b80690ba108f701c1b1a5e697720","sha1":"befbf4e1dec83cfd6b3a327a909be07a4f8ab490","sha256":"0d8bef99a34b9446ad386668c9742d804417dad6f930213a1dd1cbb8dacbd6e3","sha512":"7cc76f2ee11c4395caa4a50a63bbd1668733e4f8ba3d89189a8014364a7e93873434b7b7b7c7ab37f624d4558e064d913657c064dcc9b35f892a0f05e0991130","ssdeep":"192:q6e4j3qVXlu798fbuEO4C5/hsNs35PhSkzISM8Z:bel29YFts/Swau","tlshash":"62f153497542b57f393b7071d0af220b313970a3a84b4861e9b8f6d87c789792a23d7d","size":8109,"data":"","first_seen":"2025-07-25T05:28:04.240916Z","last_seen":"2026-08-11T01:21:49.78327Z","times_seen":28257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabeton.com/","fqdn":"galabeton.com","domain":"galabeton.com","tld":"com"},"ip":{"addr":"172.67.133.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad81beb0a28e87fe3ce3742823d264a8","sha1":"f0aa1a71cc5d0b2b40e1b009486fc627f7703878","sha256":"10531cb9ccd59383133c85843a19c55ba0a27d1a2eb912628e9bd7f68b479aa5","sha512":"ed7834311ae7828b03aa5a7411e9f4bbf5066879ee89fe01f83fa28d1a299733d0a81eea1cc4ab97477bf80c13c5ecf94e398d95c3bd3a2911d480b651c6fb78","ssdeep":"","tlshash":"9131ee7df5291636095661fde399e341a030f0dadc428424efb5cc5ea8cce9548abdf2","size":1717,"data":"","first_seen":"2025-07-25T05:28:04.194173Z","last_seen":"2026-08-11T02:42:46.748867Z","times_seen":19769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabeton.com/wp-content/litespeed/js/4c68220340aa0e52bebb75c7ee482bfc.js?ver=0b64b","fqdn":"galabeton.com","domain":"galabeton.com","tld":"com"},"ip":{"addr":"172.67.133.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c68220340aa0e52bebb75c7ee482bfc","sha1":"8d391f913ff590c56222cb07c6150aa91589a36f","sha256":"2f0443111235245d93bc0d12e6f7ac60a89316ea3cf29a9856cf43f563a50af7","sha512":"e9abba0072b42ed5f5c7f51b59e87d58cedf05bce3412156f744fd0bc71f40834bba991fdab8467a329e81541641973199ca0b4c9081b06d56fb048a2c4cfe69","ssdeep":"3072:sHNwcN9VBQpLl88SMBQ47GKorPU+/hvDbr3x:sHW49VC78UBQ47GKorPU+/hvV","tlshash":"5fd329da729574328bf731ba202f910bb2774989680d8814f168d4e9bc7c94a5337fbd","size":140740,"data":"","first_seen":"2026-03-02T14:05:34.927474Z","last_seen":"2026-03-02T14:05:34.927474Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"galabeton.com/","fqdn":"galabeton.com","domain":"galabeton.com","tld":"com"},"ip":{"addr":"172.67.133.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T14:04:57.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabeton.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 04:25:45 GMT","end":"Wed, 29 Apr 2026 05:24:31 GMT"},"fingerprint":{"sha1":"41:B7:E9:73:4E:5A:F4:A1:1B:3E:14:68:18:A8:A4:EB:49:59:84:23","sha256":"85:7C:8C:D6:AF:B8:A9:98:2A:39:45:F1:EE:C1:97:D6:91:E7:08:5C:C7:74:E0:F2:2C:11:29:5C:62:5A:BA:EA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabeton.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:04:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-cache-handler: nogay-html-cache-engine\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tph6cWNCZbLk9vZeMCO0acv6AavKXbpKP2zOVKAgWX0pg401ubTHYeGgXq7HRBkBsMVowoHBUtK7VW09iyHPchsarpQ55swj9cKj7bU%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60f41dcd9d1f50-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":43770,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20016)","md5":"74d69c286a09a5142f5875dbc7a3b416","sha1":"cc8b2c827ddd48e5cfae0994b2a23dc7c8d93617","sha256":"ac92fb81f01eafa2822e29ac9e3e79ac06385fac2a2db47d19c053b556ec72c4","sha512":"8212a05ac0ff7955bfe4d055a1023bef533c7459ff90fbfb6e2b7a8d9fed313294ce43bcb78f5b04a211fe3d2e106628935cac0ebdd1d3153db46528507b2188","ssdeep":"768:1Ook6trkSimnmYqTPZynbBi2Er/l/l/l/l/FBMPJ96Ff29YFts/Sn1p7EH:1Dx/nbj8/l/l/l/l/FGJ62otrS","tlshash":"871339bf2324583e1b171694d016310d3e3278ebdea6c884e796fead6074db16921e38","first_seen":"2026-03-02T14:05:34.915648Z","last_seen":"2026-03-02T20:19:00.395461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":38,"dns":1,"connect":8,"send":0,"wait":178,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"galabeton.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabeton.com/wp-content/litespeed/css/71ef600326659bea44c5887abb2a5f5e.css?ver=0b64b","fqdn":"galabeton.com","domain":"galabeton.com","tld":"com"},"ip":{"addr":"172.67.133.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galabeton.com/","date":"2026-03-02T14:04:58.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabeton.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 04:25:45 GMT","end":"Wed, 29 Apr 2026 05:24:31 GMT"},"fingerprint":{"sha1":"41:B7:E9:73:4E:5A:F4:A1:1B:3E:14:68:18:A8:A4:EB:49:59:84:23","sha256":"85:7C:8C:D6:AF:B8:A9:98:2A:39:45:F1:EE:C1:97:D6:91:E7:08:5C:C7:74:E0:F2:2C:11:29:5C:62:5A:BA:EA"}}},"request":{"raw":"GET /wp-content/litespeed/css/71ef600326659bea44c5887abb2a5f5e.css?ver=0b64b HTTP/1.1\r\nHost: galabeton.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabeton.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=14400\r\nexpires: Mon, 02 Mar 2026 14:03:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 07:06:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28815\r\ndate: Mon, 02 Mar 2026 14:04:58 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IagDnnmoPkFysFawLK15RAAaj200u3dx41CLosiAeUo26s8HkzYzjD8pNaR2oXeg7Cq8k1zwuEft%2B5bQYd6UAkJsxaQRx6bg0ULqBio%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9d60f420eee3b80b-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":191037,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"71ef600326659bea44c5887abb2a5f5e","sha1":"212f376a032818416dfcdbf50958bb36c2cf7836","sha256":"7ea6217a715f2133b0f30c5570494496958a21f5f02058f8cd3bb9fca91307fa","sha512":"d7882ca5bf80bba5f57d96c2204990f395f86e1b33d6415839e5dde2cb3923842a8e39244453643152db772d567fef7d027830c25cef47bc8359fbfdf95235e7","ssdeep":"3072:qToeJBCCUQg5MG7x+qehvP0xdclkWwbFpPmaAiSLCq:EfUQg5MG7x+qehvP0xdclkWiF/gL","tlshash":"6c14936057b488f837bbc72aaf4df358a116fa11d1495beaf06ad054a1cc69508e3f0f","first_seen":"2026-03-02T14:05:34.918615Z","last_seen":"2026-03-02T20:19:00.408493Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"galabeton.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVc.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabeton.com/","date":"2026-03-02T14:04:58.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVc.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabeton.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabeton.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23582\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 23:00:40 GMT\r\nexpires: Thu, 25 Feb 2027 23:00:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:29:38 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nage: 399858\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35316,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"271415ab9b2f9a851c4397c620345923","sha1":"4a9643de5d10152c743ba414e13dd16a1be9e7b6","sha256":"d8f99fb48842f2a6b113cb9934e41bde592193380396bf352aa85d634e77ce9f","sha512":"3612c1e08b85136da79c920db1f49194209109b6d1cfd9a98ccbc40102529954258b3e0a1ff285a87045d2c4e7ad635127f0b9261fe25c356915ad7a136cc808","ssdeep":"768:dDaliyKS73htOQv50E0y4YTVonw1M/xRB+PPCRg:d+K0LOSKPyFqw1M/sPPCO","tlshash":"4af2ae17f313ff1cf53138b995e4e3626f96d8229397835b694d220eac96028c9906ed","first_seen":"2025-09-18T21:24:17.202202Z","last_seen":"2026-08-10T11:23:51.668736Z","times_seen":1291,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":123,"dns":1,"connect":21,"send":0,"wait":23,"receive":18,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVc.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galabeton.com/","date":"2026-03-02T14:04:58.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVc.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galabeton.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabeton.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 06:11:06 GMT\r\nexpires: Fri, 26 Feb 2027 06:11:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:29:39 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nage: 374032\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35292,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"8ef8d817f2015a234a528c2ba6009e6c","sha1":"21788e11667cba41a1c2cc59fb4983daf0de5cbf","sha256":"0da08354e9db8b0d47832c36325d314bbc8d41e0f6729cb15f9731181c8245bd","sha512":"f86293835eddcc9f87085a5b214534c6bfe2d93b67c2b3b7dd599752c59fc484495ef9b0ddf84234439bbc09e344f5e61e8c06d4f449562989064284068a3917","ssdeep":"768:ayFvJ+6l7hIgzJUOidEzVP/I8MYUt8YBK0+Q+3fYBlUh:ayFR3d2siCS83S8EYQ+ABlu","tlshash":"92f28e12f323bb1ce43239fc55e1f3215f46d802979e831b258d260eac5715ccaa9be9","first_seen":"2025-09-20T11:34:04.080299Z","last_seen":"2026-08-10T10:16:30.288842Z","times_seen":762,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":118,"dns":1,"connect":22,"send":0,"wait":38,"receive":10,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabeton.com/wp-content/uploads/2023/01/143409_300x100.jpg","fqdn":"galabeton.com","domain":"galabeton.com","tld":"com"},"ip":{"addr":"172.67.133.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabeton.com/","date":"2026-03-02T14:04:58.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabeton.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 04:25:45 GMT","end":"Wed, 29 Apr 2026 05:24:31 GMT"},"fingerprint":{"sha1":"41:B7:E9:73:4E:5A:F4:A1:1B:3E:14:68:18:A8:A4:EB:49:59:84:23","sha256":"85:7C:8C:D6:AF:B8:A9:98:2A:39:45:F1:EE:C1:97:D6:91:E7:08:5C:C7:74:E0:F2:2C:11:29:5C:62:5A:BA:EA"}}},"request":{"raw":"GET /wp-content/uploads/2023/01/143409_300x100.jpg HTTP/1.1\r\nHost: galabeton.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabeton.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=14400\r\nexpires: Mon, 02 Mar 2026 14:03:57 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 27 Jan 2023 09:48:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4230\r\ndate: Mon, 02 Mar 2026 14:04:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NI0jIb3mOnAkKGCmXSQg2BDKYIPBItTRPrurtdQoR6wd8DNq8CVm2AVoA4bfF9K36V74%2BqdHq94zUEQDd4%2Bglwm2l7Z7bSBhOqN8trg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d60f4243f74b80b-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x100, components 3","md5":"2c3c459807d650dc8fd7d14e7e9e399d","sha1":"7c0af7bef6a5322140b76345965af8ed3be3e624","sha256":"ff3b35caa32d97da0ede65be809f7856b5b43defe595c2bef0462322cd893680","sha512":"5222bf1fdd41e7764c4459b7c2da3e0d59df6ebb864bfbf25b0c23fe56415291074e8e6f6a4eda03698f73a752b6e3935668cc67fa9b86fc7ca1f6b6198dd070","ssdeep":"96:aEQoIubzRAqegctA+R1xkFvzKmGhA9XIi0XTXINEsQaEhr4t:agjzqqe1tTXOFvzKVA9XIjTXIqsQaEhg","tlshash":"dd91d52b3f5b8d538742db797fa4083c3b5181ae6e8171feb5960ce59f11066af4401b","first_seen":"2026-03-02T14:05:34.92431Z","last_seen":"2026-03-02T20:19:00.371746Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"galabeton.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabeton.com/wp-content/litespeed/js/4c68220340aa0e52bebb75c7ee482bfc.js?ver=0b64b","fqdn":"galabeton.com","domain":"galabeton.com","tld":"com"},"ip":{"addr":"172.67.133.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabeton.com/","date":"2026-03-02T14:04:58.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabeton.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 04:25:45 GMT","end":"Wed, 29 Apr 2026 05:24:31 GMT"},"fingerprint":{"sha1":"41:B7:E9:73:4E:5A:F4:A1:1B:3E:14:68:18:A8:A4:EB:49:59:84:23","sha256":"85:7C:8C:D6:AF:B8:A9:98:2A:39:45:F1:EE:C1:97:D6:91:E7:08:5C:C7:74:E0:F2:2C:11:29:5C:62:5A:BA:EA"}}},"request":{"raw":"GET /wp-content/litespeed/js/4c68220340aa0e52bebb75c7ee482bfc.js?ver=0b64b HTTP/1.1\r\nHost: galabeton.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabeton.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=14400\r\nexpires: Mon, 02 Mar 2026 14:03:57 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Jan 2026 22:22:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 44263\r\ndate: Mon, 02 Mar 2026 14:04:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eTHVNmKPMDuVJl7H9z72kfzQ2Aw9SOD3argdJkbh86vi5mCNMSq6mSDwU106J5fA7Ja%2FGhMF5BgBXzVAZ1PVgljpKA8kR49i9E82xr0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d60f4243f75b80b-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140740,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"4c68220340aa0e52bebb75c7ee482bfc","sha1":"8d391f913ff590c56222cb07c6150aa91589a36f","sha256":"2f0443111235245d93bc0d12e6f7ac60a89316ea3cf29a9856cf43f563a50af7","sha512":"e9abba0072b42ed5f5c7f51b59e87d58cedf05bce3412156f744fd0bc71f40834bba991fdab8467a329e81541641973199ca0b4c9081b06d56fb048a2c4cfe69","ssdeep":"3072:sHNwcN9VBQpLl88SMBQ47GKorPU+/hvDbr3x:sHW49VC78UBQ47GKorPU+/hvV","tlshash":"5fd329da729574328bf731ba202f910bb2774989680d8814f168d4e9bc7c94a5337fbd","first_seen":"2026-03-02T14:05:34.927474Z","last_seen":"2026-03-02T14:05:34.927474Z","times_seen":1,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"galabeton.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabeton.com/wp-content/uploads/2021/06/cropped-galabet-favicon-192x192.png","fqdn":"galabeton.com","domain":"galabeton.com","tld":"com"},"ip":{"addr":"172.67.133.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabeton.com/","date":"2026-03-02T14:04:58.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabeton.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 04:25:45 GMT","end":"Wed, 29 Apr 2026 05:24:31 GMT"},"fingerprint":{"sha1":"41:B7:E9:73:4E:5A:F4:A1:1B:3E:14:68:18:A8:A4:EB:49:59:84:23","sha256":"85:7C:8C:D6:AF:B8:A9:98:2A:39:45:F1:EE:C1:97:D6:91:E7:08:5C:C7:74:E0:F2:2C:11:29:5C:62:5A:BA:EA"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/cropped-galabet-favicon-192x192.png HTTP/1.1\r\nHost: galabeton.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabeton.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=14400\r\nexpires: Mon, 02 Mar 2026 14:03:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Jun 2021 08:18:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15145\r\ndate: Mon, 02 Mar 2026 14:04:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4anrBTBGnh2wf1EwcZEvbYlZM2s0zbjC1XO30NPrYAmImggwAy%2Fmyg1n4O0r3Qqx3B4ALzyCwAKrTqZLnQAID08NGSQFvfi0LmOCfU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d60f4240f6bb80b-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15145,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"821be274a13f74f44dc5f56c3c270e26","sha1":"ca5e2dadc1c144fcc7cab283a2d0fcb56bad55dc","sha256":"addabec27d25614ae144972715ff3eb0e96457f671142f52d6960983abb0c5c4","sha512":"3ec5a572e97537612322f7c4a3a92c70b8469f5cb739a596ca91b3b83b9f6cb2bceb531ab28840e9c3fe968055f2516d7807f5c45670f12a6c5d141d97d644a4","ssdeep":"384:lCy5Au6/n8sMtzZz+1NKEXC0k2d8tcrnPdXVoGXNj0:Qy5N6/8FtzZzINfXCrClXCmNg","tlshash":"2e62d0d49083afe2cce67e4660b678c18b5edd7740b73ec96d3e54080f7222a1b94b41","first_seen":"2026-03-02T14:05:34.929482Z","last_seen":"2026-03-02T20:19:00.451809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"galabeton.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabeton.com/wp-content/uploads/2021/06/cropped-galabet-favicon-32x32.png","fqdn":"galabeton.com","domain":"galabeton.com","tld":"com"},"ip":{"addr":"172.67.133.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabeton.com/","date":"2026-03-02T14:04:58.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabeton.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 04:25:45 GMT","end":"Wed, 29 Apr 2026 05:24:31 GMT"},"fingerprint":{"sha1":"41:B7:E9:73:4E:5A:F4:A1:1B:3E:14:68:18:A8:A4:EB:49:59:84:23","sha256":"85:7C:8C:D6:AF:B8:A9:98:2A:39:45:F1:EE:C1:97:D6:91:E7:08:5C:C7:74:E0:F2:2C:11:29:5C:62:5A:BA:EA"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/cropped-galabet-favicon-32x32.png HTTP/1.1\r\nHost: galabeton.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabeton.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=14400\r\nexpires: Mon, 02 Mar 2026 14:03:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Jun 2021 08:18:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1473\r\ndate: Mon, 02 Mar 2026 14:04:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wblc0Jh0H%2BscU7P26M1CCY9qO%2BP7FWReLwPCDdO3hY61cFAG6rjfcvTmXFeZ0iV8XD8RE1uOGF0f%2BxrNc0ItdgxqavcLLDpRZbFcW4w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d60f4240f6eb80b-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"96f45b721b4d809eba6ec8a22ddd2c1d","sha1":"3b6582889f2dff7b6436f51daa47eeb2d3f4c352","sha256":"2e112df0429caf99c0c8d6409887049663805c9e4ba8fbafde59cac29200e6e8","sha512":"2caed1f32dcb8824a06aadea465bbfe7237076d24c4022fbbdb9c3400566e270fdd2254f8aeda2935ae5a94437cf8b0fa38e0cabdd790ef73ee2c296ca67a0eb","ssdeep":"","tlshash":"1f311c4181d0b6ee87d4a11476c7c151abdb41ba2a1406facb94687fb3b4a45b1d6314","first_seen":"2026-03-02T14:05:34.931236Z","last_seen":"2026-03-02T20:19:00.35128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"galabeton.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-02","alert":"Phishing Block","trigger":"galabeton.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}