{"report_id":"8b7252b3-62c6-4810-8dee-e1c5cf860c7c","version":6,"status":"done","tags":[],"date":"2026-03-03T12:32:55Z","url":{"schema":"http","addr":"m.galabet01.com","fqdn":"m.galabet01.com","domain":"galabet01.com","tld":"com"},"ip":{"addr":"104.21.86.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"m.galabet01.com/","fqdn":"m.galabet01.com","domain":"galabet01.com","tld":"com"},"title":"Galabet Giriş \u0026 Galabet Orjinal Giriş | Galabet Bonusu ve Güncel Adres Rehberi","dom":{"size":36313,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"66596a77bdcc0cec656f830e57d28e8e","sha1":"881c95b83f0f387ba110c5d720ce21a33ac8e3a3","sha256":"b66e094f0657ce1683278f4e295d5a7e649298d279da2938ed382d2bd781196c","sha512":"2a1de33c7f8c44dab8157a232ce5b19c080ce84c8e4bb7f1297af4e893e01b8739ad289bb9334a500a90d2ba3b6b180ae9b3978a1a681cbb4e752c7770ad0e63","ssdeep":"768:IGT5Dj4C2tNoNSl38mfMdh4ZOGjtCpuGSzAdOVpHXOZ:IGT5Dj4C8l1fW44GjEpuGvOVVk","tlshash":"96f2f8ac47f3291e27439198d6e73a1fdea2c303d815f908bb5d8e5d5f88b96c493208","dom_hash":"domhash85319aae89939a68f717014cebbcc6a9","first_seen":"2026-03-03T12:32:59.43161Z","last_seen":"2026-03-03T19:37:25.238356Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.galabet01.com","fqdn":"m.galabet01.com","domain":"galabet01.com","tld":"com"},"ip":{"addr":"104.21.86.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-07T12:32:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"m.galabet01.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"m.galabet01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"m.galabet01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"m.galabet01.com","ip":{"addr":"172.67.220.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":4,"received_data":82542,"sent_data":1790,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.4.18","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"m.galabet01.com/","fqdn":"m.galabet01.com","domain":"galabet01.com","tld":"com"},"ip":{"addr":"172.67.220.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de9846621e978de84a3876f6297f6e70","sha1":"fe659a732bdf961961e0b5d26f761b53eedc3677","sha256":"1bae844d4ab1f0c1171faeeb34a009aa0835b5461b5905844084c1393021ec83","sha512":"daccf39fa178784bb5c3cb01c98e70681dfab47e87ccc6c46d9bf12d0371f7a9631e8143d91ab5219e61f105a4b7c66210fbe0f9a9ea3791b17dca1adbaaf925","ssdeep":"","tlshash":"9e01cb2611f430b0a097b28e52dbdb142138c49be08ce780be1c4f49afe04e84336e09","size":750,"data":"","first_seen":"2026-03-03T12:32:59.446442Z","last_seen":"2026-03-03T19:37:25.249985Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"m.galabet01.com/","fqdn":"m.galabet01.com","domain":"galabet01.com","tld":"com"},"ip":{"addr":"172.67.220.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T12:32:33.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet01.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 10:47:18 GMT","end":"Mon, 01 Jun 2026 10:47:17 GMT"},"fingerprint":{"sha1":"F1:1B:23:D2:E4:C2:40:C1:B4:D9:9C:8A:73:DC:E5:CA:D0:5C:A7:57","sha256":"68:68:B0:8D:1D:86:98:DF:53:DC:FA:A7:94:04:22:F3:B4:62:47:1C:F0:71:68:35:ED:0D:A2:8F:EE:3F:6B:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.galabet01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 12:32:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/8.4.18, PleskLin\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GWHSiDFpyZ9C3GybP0%2F%2F%2FKv5qYy%2FEibOdpO6igRBa%2BtjbuSpwyPoP64Rs4NRWwpdbh7aSqjFjFvqiV0ZCqrpPtW766GxB6VGew6PFQ00yQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d68aa2148faea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.4.18","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":36442,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e5a6fd291c4761fcdd1552a7a5a5f1d8","sha1":"04d9888652529c47c55fa25335c4d8b80132d119","sha256":"0a7c9733bb2c3726efa985dd1e284daf5c5953bb1f36fae589f61ae58ca2f15e","sha512":"d6ec74523a2f69484a7fe0516611fa8a8b938deb7873bbf343fd47242d8c90fccbf55586a104fdf48334689a7799ed4bc0b7cac389b535124f2c215ba48d7571","ssdeep":"768:n9A8rQ4C2tNoNSl38mfMdhHZOGjtCp5GSzAdOVpH54OX:n9A8rQ4C8l1fWH4GjEp5GvOVQy","tlshash":"3bf2f86d47f3291e270341a8d6e72a1fdea28303d915f90cbb5d8e5d5fc8b96c693208","first_seen":"2026-03-03T12:32:59.438884Z","last_seen":"2026-03-03T19:37:25.244138Z","times_seen":3,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":31,"dns":0,"connect":8,"send":0,"wait":111,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"m.galabet01.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"m.galabet01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"m.galabet01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabet01.com/logo.png","fqdn":"m.galabet01.com","domain":"galabet01.com","tld":"com"},"ip":{"addr":"172.67.220.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabet01.com/","date":"2026-03-03T12:32:33.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet01.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 10:47:18 GMT","end":"Mon, 01 Jun 2026 10:47:17 GMT"},"fingerprint":{"sha1":"F1:1B:23:D2:E4:C2:40:C1:B4:D9:9C:8A:73:DC:E5:CA:D0:5C:A7:57","sha256":"68:68:B0:8D:1D:86:98:DF:53:DC:FA:A7:94:04:22:F3:B4:62:47:1C:F0:71:68:35:ED:0D:A2:8F:EE:3F:6B:F4"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: m.galabet01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabet01.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 12:32:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 24247\r\nlast-modified: Mon, 02 Mar 2026 10:52:47 GMT\r\netag: \"69a56bff-5eb7\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJLzGBOddkHnJefcUiiAe5DTNVfe%2FTzGHgi%2BGpVkUm9VnNKp43WnRFraMSlAkekGK%2Fn7vFPySkMI%2FVsoARVwngWAlfKXiepCQFLOU0pPPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d68aa233c2de9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"a279b1e0dbda4ac80a12a579e86da047","sha1":"f50a8b157db5db580b9125f47e6e1208d9e47bba","sha256":"fba745e1a3f52671d209438459bd30e9ee54c8630ee1cfdb7db2cc6fff58d343","sha512":"8b80b891f28a9b43184a22014a8935ecefca36a445a8a41726a4b3aabf71cec0cfa5cc6fa90b447403658179b751cce98141da3f98ebddd2169cedf8ab8bde3b","ssdeep":"384:dcE1Jh4n/yp6nY5l96yLKYEriaiVI0e9m7a7xL25G82EPILYAh4/jhkotyfq1TzU:kap6nkl19EriaiVjUm7ad25BEYluotSv","tlshash":"89b2d19949588bc33c8d1786c84524ba7c9d74f686369b9a1309e56b07f7f6c8e43ac0","first_seen":"2026-02-04T20:07:14.948759Z","last_seen":"2026-03-03T19:37:25.246033Z","times_seen":9,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"m.galabet01.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"m.galabet01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"m.galabet01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabet01.com/180x180.png","fqdn":"m.galabet01.com","domain":"galabet01.com","tld":"com"},"ip":{"addr":"172.67.220.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabet01.com/","date":"2026-03-03T12:32:33.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet01.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 10:47:18 GMT","end":"Mon, 01 Jun 2026 10:47:17 GMT"},"fingerprint":{"sha1":"F1:1B:23:D2:E4:C2:40:C1:B4:D9:9C:8A:73:DC:E5:CA:D0:5C:A7:57","sha256":"68:68:B0:8D:1D:86:98:DF:53:DC:FA:A7:94:04:22:F3:B4:62:47:1C:F0:71:68:35:ED:0D:A2:8F:EE:3F:6B:F4"}}},"request":{"raw":"GET /180x180.png HTTP/1.1\r\nHost: m.galabet01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabet01.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 12:32:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 18652\r\nlast-modified: Mon, 02 Mar 2026 10:52:46 GMT\r\netag: \"69a56bfe-48dc\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXA9TcpFHDyllrJxQVLnGlrMkg7xw4baikG5zbSmH%2Fg6pC8L5jYpB3I%2BHgnN6Y5eQmc%2FhrRmFrUddd4rzFbUo%2B%2Bdi84swhAdu1%2FdIpJEGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d68aa241c62e9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":18652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"d8e3cbecb492dcc7a8982ceab3c90959","sha1":"143115879f6b0cbb97129439e90c195f56f5f54e","sha256":"44ccbb5954139f8378a1286494fa2b4933006eb1f659717c2e4e46c7614f094a","sha512":"2d893681fe863ddcf85db8d742b4b211b0f580e138ca20eff414ccc12fdb950f9dcabb1bb10e13ac947a7f51df4f76dab74838f3564fc132725a18f3bac5e0e0","ssdeep":"384:9Ag0KeczQukiZge1jTNAwDtoGKlm7tRh1a6dJE7JNFEea/mGKki:930KZQBVwD6/k1dJwEea+gi","tlshash":"2082e0a9db7c2e72ee9a1aa37c786552b3a7d146084b84e6b01d539fd3302c183f40d2","first_seen":"2026-02-04T20:07:14.951394Z","last_seen":"2026-03-03T19:37:25.24813Z","times_seen":9,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"m.galabet01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"m.galabet01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"m.galabet01.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galabet01.com/16x16.png","fqdn":"m.galabet01.com","domain":"galabet01.com","tld":"com"},"ip":{"addr":"172.67.220.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galabet01.com/","date":"2026-03-03T12:32:33.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet01.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 10:47:18 GMT","end":"Mon, 01 Jun 2026 10:47:17 GMT"},"fingerprint":{"sha1":"F1:1B:23:D2:E4:C2:40:C1:B4:D9:9C:8A:73:DC:E5:CA:D0:5C:A7:57","sha256":"68:68:B0:8D:1D:86:98:DF:53:DC:FA:A7:94:04:22:F3:B4:62:47:1C:F0:71:68:35:ED:0D:A2:8F:EE:3F:6B:F4"}}},"request":{"raw":"GET /16x16.png HTTP/1.1\r\nHost: m.galabet01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galabet01.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 12:32:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 470\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 02 Mar 2026 10:52:45 GMT\r\netag: \"1d6-64c08630d5281\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sy%2Fn8bP%2B2V8jKqtnSqXuUaqq4vcu09nx7FCFJgqtt6z0IolC6fk0PiddwVqEKrTfIkuA5%2BbwT7aJM5AlRQYJyW91hlufRMBDU%2BYBncet%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d68aa241c65e9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"6d6f03041c1efcbd36172bc0e8ae6955","sha1":"10c62377a5a187a6cb447444a1c289be752d8f56","sha256":"eb7cf1a223f1d786fa3c51dd8a6ce10bc0f674b95b6e6a9519c479ddde769aa2","sha512":"ecb710cb8b7bd6c23d3e6c446c31db0df36e23138114c72bfda7d1895b66525ae05eb4d788685d15e8076aa0f19c1e298a03ea8918fba7534e0adde36ba45cea","ssdeep":"","tlshash":"0cf02bff7597ee58a7154635433bc35168fe041c7179530cc15450755522dd1e4f5f05","first_seen":"2026-02-04T20:07:14.943129Z","last_seen":"2026-03-03T19:37:25.242138Z","times_seen":9,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"m.galabet01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-03","alert":"Phishing Block","trigger":"m.galabet01.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"m.galabet01.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}