{"report_id":"b03b15a1-696b-42bb-8b8d-06e82365a168","version":6,"status":"done","tags":[],"date":"2026-03-21T17:26:12Z","url":{"schema":"http","addr":"galebet1065.com","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"galebet1065.com/tr/","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"title":"Galabet Güvenilir Casino\u0026Bahis Sitesi","dom":{"size":3744,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (607)","md5":"1c7d5d5e82aa49b500510b312441f51b","sha1":"4ff2b09ce5ca7852c8ce1ebd8539b4bc57e5b2a5","sha256":"7a0a478eb0df110583cc4c1c4c55d92d5f7457eccd3d4742f2d0f89e377527df","sha512":"fc3d7976266fce06b6c8697ad60e5f076bbf07d8a28e13d64a81ed92858977172e6870f97d447076a3cb248ede3b0478d9fee0cd944c4e57db4eb184acac6f58","ssdeep":"","tlshash":"407183258ab20526036b506c3aa7f32fb23ad1033649d9447aad53405f45fa8ccb37de","dom_hash":"domhash9d04913952afd4564baa478ba5fdebdc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"galebet1065.com","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-25T17:26:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":50}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"dataspot-internal-wss.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-internal-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-internal-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-internal-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-internal-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"go-cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"dataspot-bucket.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"eu-swarm-newm.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"eu-swarm-newm.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"eu-swarm-newm.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"eu-swarm-newm.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"eu-swarm-newm.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"rgs-wss.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"rgs-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"rgs-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"rgs-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"rgs-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"dataspot-wss.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"crm-lib.fasttrack-solutions.com","ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-28","domain_rank":1905587,"first_seen":"2019-02-04T20:13:24Z","last_seen":"2026-03-19T00:07:10.558163Z","alert_count":0,"request_count":5,"received_data":2940993,"sent_data":2412,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"events.eu1.segmentapis.com","ip":{"addr":"52.49.32.105","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2018-07-31","domain_rank":186340,"first_seen":"2021-08-11T00:43:45Z","last_seen":"2026-03-18T19:41:22.426378Z","alert_count":0,"request_count":1,"received_data":260,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dataspot-wss.galebet1065.com","ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":1,"received_data":1418,"sent_data":988,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"eu-swarm-newm.galebet1065.com","ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":1,"received_data":1446,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"statistics.22btcoservice.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-03-19T19:11:31.281073Z","last_seen":"2026-03-19T19:11:31.281073Z","alert_count":0,"request_count":41,"received_data":78180,"sent_data":18799,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-03-19T19:11:33.176966Z","alert_count":0,"request_count":8,"received_data":460878,"sent_data":5058,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dataspot-bucket.galebet1065.com","ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":2,"received_data":103075,"sent_data":1444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdn.segment.com","ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1998-07-06","domain_rank":9348,"first_seen":"2014-04-11T12:30:48Z","last_seen":"2026-03-18T16:50:27.809257Z","alert_count":0,"request_count":2,"received_data":111164,"sent_data":955,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"vsa137.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3118692,"first_seen":"2025-01-31T21:17:45Z","last_seen":"2026-03-17T04:02:03.271713Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1080,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2026-02-04T12:39:13.107167Z","last_seen":"2026-03-04T19:25:22.439656Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1182,"comment":"","tags":null,"fingerprints":null},{"fqdn":"galebet1065.com","ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":800,"request_count":160,"received_data":6807889,"sent_data":106894,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"icons.galebet1065.com","ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":210,"request_count":42,"received_data":1105886,"sent_data":25968,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-03-16T03:50:54.290602Z","alert_count":0,"request_count":25,"received_data":1184376,"sent_data":11333,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-15T22:42:33.164796Z","alert_count":0,"request_count":5,"received_data":2702752,"sent_data":2416,"comment":"","tags":null,"fingerprints":null},{"fqdn":"geoapi.21btcoservice.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-03-21T17:26:26.445513Z","last_seen":"2026-03-21T17:26:26.445513Z","alert_count":0,"request_count":2,"received_data":2304,"sent_data":934,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.recaptcha.net","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2026-03-16T11:05:46.49512Z","alert_count":0,"request_count":3,"received_data":99780,"sent_data":1874,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2026-03-18T16:10:57.776455Z","alert_count":0,"request_count":2,"received_data":2114,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rgs-wss.galebet1065.com","ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":1,"received_data":1315,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-03-15T22:41:25.364766Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"galabet.winwingames.io","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2026-01-16T16:03:38.346691Z","last_seen":"2026-03-04T19:25:23.891698Z","alert_count":0,"request_count":5,"received_data":58180,"sent_data":2345,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"go-cms.galebet1065.com","ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":50,"request_count":10,"received_data":59218,"sent_data":5491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"dataspot-int-bucket.galebet1065.com","ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":2,"received_data":257045,"sent_data":1452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cms.galebet1065.com","ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":25,"request_count":5,"received_data":29850,"sent_data":3885,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-15T22:23:30.202114Z","alert_count":0,"request_count":4,"received_data":1799937,"sent_data":1825,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-03-16T08:24:17.268159Z","alert_count":0,"request_count":3,"received_data":7079,"sent_data":1553,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dataspot-internal-wss.galebet1065.com","ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":1,"received_data":1427,"sent_data":984,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1337software.com","ip":{"addr":"104.21.18.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":42600,"sent_data":1005,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-15T22:34:11.913686Z","alert_count":0,"request_count":2,"received_data":123510,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":2,"received_data":5296,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"galebet1065.com/assets/index-D3fSQXEs.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41433d346d7ed3912f226ea164c252c","sha1":"a1409bdc0a0cd16cb984a1577d3cf1c4322f6b69","sha256":"6eac4a01169d0718b30556d21e9b2ce8a89a6b560bf33a2af211e551c7450669","sha512":"ee2f8262d50c92c4d2d85889f641d506c01435050922f5b62eb21b3fdbb1eb3fab95ea2cd24ee5fa6e8f5ad492182a0aef40c188731c060139226288cf02d0b4","ssdeep":"24576:5Dauc8xbGV0CzrP4e5DkXfhPy6L2Zmv6IoVxZK+inbuVIXEt70V/vazSCMlAjRB7:5Wuc8xbGV0CzrP4e5DkXfhPy6L2Zmv6L","tlshash":"cc358d85b145b8799bb709e560af1006b1391e00f80dc4a0f57cddad29bd849a2b7ffe","size":1128997,"data":"","first_seen":"2026-03-21T17:26:39.744438Z","last_seen":"2026-03-22T00:40:18.221566Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FavoriteGamesButton-CYfYTrLX.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a565c8afa2e2ec3fb7c9744f2b8c63a","sha1":"41e7243f94d4d2ec8d2f5f0c53ec8478d6bf07f3","sha256":"9097c3310dd046a510dd2fdc578c8d96061c1b1c8cfd91725c61b39b36574553","sha512":"52e6ec9255825251f43fec7a6e3dce10e459c123e1449d847e14f3b4e386293dbfefc4d5e586497b58e2a205d36e2a590b29af027ae89fb33fcf4e89788d5847","ssdeep":"","tlshash":"02e0fa0bd059d1fa2b436fd01107c8243436b47cf79cd090408918503d70597c54ed6f","size":427,"data":"","first_seen":"2026-03-21T17:26:39.361872Z","last_seen":"2026-03-22T00:40:18.081875Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-BgO3MW-h.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"21a327b0619c3c1a324057951bbd14ab","sha1":"4f00a495a58ee62d19e6b5849989cc5618177634","sha256":"f69a26ae2b8c112785730a553e7f2b7d2b41ae889627f26f0b866746c536b6d6","sha512":"b0b3795759a6c3180fd9e4fa453572caf9644e0f2dcb10b11f1b5e526ad304a6fe0011fbf80296459ff6e8c516f52aecfad1f5ef58be025985b6c9c261bc7841","ssdeep":"96:q1SCtCFVeh7FHpokS73s9lsv2InwLRiTvHUgAaQKFr0FdWpA6u6PEDdxrOq+IHWE:R+ljijHvH0FdIuSEDdxP+Vj8Eu","tlshash":"16c1a65631907530c6d244a6914f42aeee3e7638f00f50a0b23f9c6d3ba1525daa3ebd","size":5948,"data":"","first_seen":"2026-03-21T17:26:39.40142Z","last_seen":"2026-03-22T00:40:17.987168Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1337software.com/chatlar/16bce798aa7eff0a39106e935a4d41cc9c5ec31bef333fccde989abce04a699e_588-chat.js?v=1774113931.702","fqdn":"1337software.com","domain":"1337software.com","tld":"com"},"ip":{"addr":"104.21.18.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9631d7a939c9c9d5d31fe4dbc95d1fbc","sha1":"c5e2b8bd6107dfd07486ae6b144ea1a2022e747d","sha256":"c8ebf2e766e2918f462d73c0a82200a78a5c42176391a95822cb7480639fc7de","sha512":"b9c71b1f1db243e18f54254695c1181b216618de865fd2fc5fa83d1b04758aff043904db913594a7c5c1a14df74e7b4133105632f2f9a49e6d354ca2a85bbe68","ssdeep":"","tlshash":"f5c04ca721c0a784228104d8c4c92cdca1d3510afe5b2ed2be374d2c500fed9a6d6c15","size":157,"data":"","first_seen":"2026-02-17T14:59:45.011347Z","last_seen":"2026-03-21T23:21:16.884356Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-22T00:02:58.110738Z","times_seen":76896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ac4b41bfa3079e73da08ba512cca2e3","sha1":"28236a6e21a500f8eb1fc0804ed1553f4b7fdcae","sha256":"b6ca684b4ef298f79d931ea40f8c3b597bd7e8d892a21e7cfc756cb3215792eb","sha512":"8fc4f8a4242748771f8a9220744ad1a1b501fa381ccbea978dc7062afee4c8788f2ad79a74572020146ce13610abcdba43f005cc36a2a455eb2d6a226a689f24","ssdeep":"384:UJw/U5YK8Hx9KJsThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJsThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"9052c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","size":14213,"data":"","first_seen":"2026-02-19T03:13:10.683375Z","last_seen":"2026-04-15T01:21:42.644883Z","times_seen":7903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/WagmiConf-B0zYIpvp.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffc7f8013321c1fcfc6d9055babc05f","sha1":"f2b3ff148c33a75074e577fe689c3a7e07791157","sha256":"233f2d1fe68f5aef052bc5e2ef81a7663782ade365249e40d628f8f1c6e82879","sha512":"1ac7b4df1da940a29ab80541089861f322f6edeb46925d8c5075b01c66e5dd4dcb39349ba4814f5262b6934b7afe14b68d172595066334dd94364782af886a51","ssdeep":"1536:892Caz/SCdwD7ZajZlO7jMMDWOx6uxG7k8UhVxSuS7XUF3waGBfGYBgEytq2bPYE:hCaSlx5xG7NU+WEy1bPjv1K/XGd","tlshash":"67a34ad07196b46103a74ae008bf440bf139ac34200e565cf269ecde79b96ea9277f7d","size":100978,"data":"","first_seen":"2026-03-21T17:26:39.449607Z","last_seen":"2026-03-22T00:40:18.116093Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/GoogleTagManagerTracking-DAQdr4EP.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1851f665ed369b09c168336a0dfc7620","sha1":"56104bf45809c75b4adc2c608aefe6cf8b84bbb6","sha256":"278a0f52fbce8ceed2a9b0a736b6ad7b2d4229c55e7546093d62a9a550d265a6","sha512":"6c441232aeb4d969ce40dd487a293f6a0efd543b5a5f92bb46af589c9487f433f660a280888d7fa139778497f08bfe7af278653166345a79197242731ceca54d","ssdeep":"384:db3bEI5wTlaZdtdoNc5GRU52iWD+FOTVKWZxxqyuQPfg1F0TQOmJNw9vU6:l3bEeSEDdoNcwiAiWqFOTVJZnqyuQPwU","tlshash":"6182b9d7f96548e0a5bc1fe81f92428b35b1b669f48140747c9e7c0c233cc4ef2a5a99","size":18997,"data":"","first_seen":"2026-03-21T17:26:39.471571Z","last_seen":"2026-03-22T00:40:17.99841Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/ButtonWithAction-DLXWMp1-.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e89d4b67c0ce532f32cec3235e50823","sha1":"cd66782d133d21562bde53ab4bf77c8e3753728d","sha256":"d8c3af745c755279a4955eb849c11298796114efe59606016a33e13402edc40f","sha512":"909db2d090af51aa3edd713ba8c6171b576535f7507409d5af21c8735726120f3812da1c036c9d58f717c15f4dd2b1321bd4ac4658db2883c6ad48901aa138bb","ssdeep":"","tlshash":"0cd0950f5451d1f603c5fdd0a22bc41139257d60f7c4c451804819403b7179dc11ef2f","size":267,"data":"","first_seen":"2026-03-21T17:26:39.607991Z","last_seen":"2026-03-22T00:40:18.009198Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b105b9d1c817d1bba91c163aac4581d3","sha1":"c22908ad81be0a8e388a40eb1e251cec4abb6092","sha256":"6e3edc344d0220e455f2aa549e20a36ac03f5cb02ddd01f318d9f7d3265c2970","sha512":"a468fd003fd463ec56511dfeedf72a9b06a95e17f3a6aa9dbef93e99c2444addb4af59cbc7d35300e1fd95c28b8c60b4d88d025b8a1cea8ba2c6862de9769f60","ssdeep":"96:5SubClTBeLPTGNlTJC6YacmDD+oXtPeYFaOatTz8:5bJYE684KoXdroz8","tlshash":"04818617e01ab3fce8ad04a2503f910e377e0bfdd75604e4d0ae09240a7d85af259bda","size":4122,"data":"","first_seen":"2026-03-21T17:26:39.427542Z","last_seen":"2026-03-22T00:40:18.100275Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-04-22T00:02:58.122214Z","times_seen":36199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-CUbLXDx4.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f6345e5eb50070d1207ee46af95b1cf0","sha1":"8f5cfa73b1aab00daee26489e596300ddccf15f1","sha256":"ea360197e86b31d860efe7abfa07659d673d5508072c4a9f9494a0893921c804","sha512":"99726a9e011902acc4873e4538ad29c6b47f34c6e64550a2d9d37c97ee22c9d772544d3f33fcfa9c6eb16cfab541e5ac981fa61b9875a8bf8b54298bb4e6df05","ssdeep":"384:fvMci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJ6:XMci408FFnJrIjE3D/OY2E0xqpc1NKkT","tlshash":"818209d0e2b4f7a642e8aadd80392074f2208c2c347dd0f1b6b6edd974664ca956dd37","size":18027,"data":"","first_seen":"2026-03-21T17:26:39.594746Z","last_seen":"2026-03-22T00:40:18.08786Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/NotificationsButton-CmZ_pc7F.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"051a83a76a17decaf79265acca3f4d57","sha1":"d7f6e37bd318580a705e97bafe6423fe59fedac6","sha256":"186e8d40128d0573379363a0f0541a546388b54f525b6da47c408f57ad8e6e95","sha512":"6b0ddf6b7e7971ef86cdc5fb4c880491532c8a50a561a398cd175d41daf7e7f72004b6a1d78fbd661d7c5c863a75f3b3f8e5e49614ea62b6436468192bb44d08","ssdeep":"","tlshash":"95f0204beaa8d4b41bc39e70633b8426383a7c2cee4a948000a62c55177015ac54fe8f","size":558,"data":"","first_seen":"2026-03-21T17:26:39.459535Z","last_seen":"2026-03-22T00:40:17.889441Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index.es-DXJtvHoT.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f5a29e9b140d89b45ef6c2dc1458af0","sha1":"d3d5fe3e4254d00e2b6c0321d24cade44f2359dc","sha256":"7bca838c2ed01b7b467f932df8f019f4ce70b01e018595eb6e01f08a1c826261","sha512":"74fd665894507bec47587bfc1fa7e1356b66e4b0efc0ee8bfeecb69331bde3cd559aa2583e98d0065525a79b28fea6568904e71d580aa5caed815377063d9703","ssdeep":"3072:AzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6Ubh:Az77jdU/7sJJMcvYisoljSFN1Nd6Ubh","tlshash":"c554fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","size":295236,"data":"","first_seen":"2026-03-21T17:26:39.597293Z","last_seen":"2026-03-22T00:40:18.118105Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/CasinoGame-ltYKuqgq.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9e451ef9a803c3f7b894af280148f56f","sha1":"8e10a59fadeecc945cd891c09f4b35cfcb109ed7","sha256":"ccfacd7e71cef622fd86d8549b91f69eef2eb67ba6604f9e7117a03d58a4e8a4","sha512":"4e025ccdc94278573d5a9df211da737ba379dbcee75021e6607a73f599fdcefe50af54c76174bdf4f6c0fb0ed1a66d3b4dfacc75d5f5854452e1b77d3a16e8b1","ssdeep":"96:jL/bVqh2iJMeVZhL+no0JzxF+zZZ9Losc3MM+xA5Z9gvWUwBVTCV+xRbK:v/xqhCex6rGFssc3MFxABtCV+xRbK","tlshash":"b7c1b445e024ebbeb83a08d9982f102574192fe5de198076f4bda839323c15d7627bde","size":5870,"data":"","first_seen":"2026-03-21T17:26:39.386441Z","last_seen":"2026-03-22T00:40:17.789882Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-5iQrWYQ_.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31e010232dd36469670cc2df8c881344","sha1":"029d5bedaa5607a234dfaeca2c6714d403d0f283","sha256":"d880db5966832fe6c39364ab8dfefe271f514cf8e5bf8aa1b86d5875c2c591b8","sha512":"6ce98fd2a8be27394661bea778cf317e1d971c3394c71ee899cb6fe0cfc4e85cce60a1cb676d3b7ae3161e368437ba252c603b73dfa3ec77e31a9cfa7dc1c3a0","ssdeep":"","tlshash":"3c5121c76042e7f4afe748a6429b10b074374d5cbe1f84a082be58964998792e35bf8d","size":2923,"data":"","first_seen":"2026-03-21T17:26:39.375997Z","last_seen":"2026-03-22T00:40:17.988097Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/TabItem-biu5pdkE.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e572f7147d80a282b702909de3e002fb","sha1":"0c64bdba98c648a7f33e629de97d0fa6a3d04608","sha256":"4f0aee67a47ed48c4eee0cdba6b7f30408ff84fbb5023e85b2ed8963ca4a458e","sha512":"0276a4ce85222bc1c92cfe0ee96591fff70ff13f56fd7fab3d0607066f8b0ed98cafd146bf4f05d575c08da4d1b3328578b0a65ceb3c45b365215a81aa713942","ssdeep":"","tlshash":"5ae02b42b020f3f5982b94d6d27f94c7322209dcda9588e6a0a22440072e561f74ff8e","size":413,"data":"","first_seen":"2026-03-21T17:26:39.549871Z","last_seen":"2026-03-22T00:40:17.82563Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"497770a2ab62f2aa5e9a92139301634d","sha1":"49c10647ffe35e24f84f743006f162ff0fe16399","sha256":"0663d282ac18b3e9d3e81725926a5310e5cae5e6954873f09b7ee193136fb5e4","sha512":"94a5141ed28656c5873a486aebfdda52790c8517426987bf905bf3c44163a25932ab17ac498215ddbea8e0e9887a8dabe6ed80acc950c993bdc61ecf977724b9","ssdeep":"","tlshash":"06a001b2053584208e6299509553bac4e187605dfd81819470265a89f3e15e7d144940","size":72,"data":"","first_seen":"2023-03-07T01:11:36Z","last_seen":"2026-04-21T23:37:34.413468Z","times_seen":22774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/public/proxy2.js","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1296781ea2c9cd24e19fe155b42373f2","sha1":"d7ce9dffbb2482bc2f3795cdeaa727d99e49644d","sha256":"de74ac92be5c23abac0e045e3380edf98b53abeb1abc7351e98ec06a71a01359","sha512":"3922435bb5f624625705a335938c57a7addd890b26905e7097bbed9882d0508fd10eacfd3fa32cf5b570deece89987d97773fc9377c68416dc03707c32e4af72","ssdeep":"192:0e/p461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:l//Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"ce92860e927b6123447334bc978ba146be1150971d0acd847f4ce394bf85b6eb6b27ac","size":19498,"data":"","first_seen":"2025-12-24T22:39:16.372563Z","last_seen":"2026-04-21T21:26:35.732746Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=492809","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a90bd08562c2b9ffa19b9fd0c10a8790","sha1":"4417a4b58c1bc7a7ae0609d53ff30d14d99f586d","sha256":"a1193fdc8d0ee22d154c5fa8476594c51162fef2bd7ef36f50b6a9639055e481","sha512":"e1f04b124317829cc29540ff65b30f690410765717d284c6a648b045839501c084ed4addb13b3fed885002456185297a31d0148976f553a9398c056c213f4a68","ssdeep":"24576:PlkKatcX3lkC8MLdI+hRInTp9Km1rHOm+QToL2nlkxaCnTzbF6P37Bh:PlHatcX3l/8MLdI+hRInd9Km1rjToL2h","tlshash":"bc257d9072567534c3b795a260be050c723c5b03740ac5a8f2bc99a92fd7c9a627bf7c","size":994390,"data":"","first_seen":"2026-03-18T12:31:46.587385Z","last_seen":"2026-03-23T12:48:40.312382Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-04-15T01:21:42.763559Z","times_seen":11136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89134e892271c99e4be394e757691c0c","sha1":"7e8e00a94406382ad3006aaffb6ba522a7172077","sha256":"d09d7f32db5774ee049fdd2fce086b87d897c6893753091886a8706e9747c9cc","sha512":"df656841a2fd8daa388e0345bb36bda46f568cb5b7f05cf9b10673227ba36da20c35d3fac4f96edc411475e93805cddbd8f85c545cc1d7c41aebbfcb9712f089","ssdeep":"192:0H9MawRIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:Kwb9HkS316xAFKpLZEh","tlshash":"6632a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","size":11888,"data":"","first_seen":"2026-02-19T03:13:10.639989Z","last_seen":"2026-04-15T01:21:42.639775Z","times_seen":6484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cac4c4586e27f267ade4724967f5b30d","sha1":"c1e83db39eb9780ff2bd5f4c9d9783c6408ded1c","sha256":"624c5bac53e7c25f71d531bf50cb6310ee536e489f381d0f761ea7a82e01b0c5","sha512":"db0c6f8bed323a959ffb887cf06bc2f1f83353d20a088d8df1f9f81b10d5c935bafcfc0493af52877315b2d60de89788e6301e4316b32cce94c7b3f4816a8832","ssdeep":"","tlshash":"8c7000882e0c3000002b3020c20b00888832080000280c08820080a00e3000a0a2380a","size":22,"data":"","first_seen":"2026-03-11T06:58:45.753523Z","last_seen":"2026-03-25T06:58:25.076171Z","times_seen":1423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/bookingBet-C2_396gf.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"382e197b84b36c2e881c5ad55ba49ffa","sha1":"f53385f540d98c26b3acd7bfe2a714778a3cfad2","sha256":"f49f90a92b84092e924250b9ba4c6d9ba49f9e1a5b7cef9c2cbf1ab9267eebd1","sha512":"ebd00bf5073c899966d24da20876fdd2296b624901691607e3e3d5dd0dd682ea0d751500286ec765da9763dc4a150be86735c8d08548888228cd3f7cb648bce2","ssdeep":"","tlshash":"2271e664fd30907e67f2317df4de7b426b2c4ba871a19a40fb6b5d0841848cbb534638","size":3796,"data":"","first_seen":"2026-03-21T17:26:39.649126Z","last_seen":"2026-03-22T00:40:18.176308Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galebet1065.com/core.js","fqdn":"dataspot-int-bucket.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1a23321d0a7b81fc124eb474f519164","sha1":"7302a4790a11a55a39af27b5c5d95391f36c7449","sha256":"ce157be72b0feb99d83e0ecb45dee49f9e8f69330da84cf33d65c8a80c297a63","sha512":"d6277696b3f9808906a75fa273e27c5777028965b625be99a466119e25cba96e635598bfa686bcfc065bb901db6dbeb2262b56012d65014d784bebc2382b5815","ssdeep":"6144:D1Osubz6j/kbklCp/5Kbb09tg8KSFO6JxC:BkbklCpxKbbCtg8KSFq","tlshash":"8e34944567f11c2752f6b0f94b0bc1d6722ac003251a9c8878ad73b85fcea7896f5bb4","size":252431,"data":"","first_seen":"2026-03-09T20:13:42.687398Z","last_seen":"2026-04-21T21:26:35.809035Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","size":60965,"data":"","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-04-21T21:26:35.769117Z","times_seen":323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/tr/","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"932d1c008400401a55681904391c206c","sha1":"7cc9f4d6461805e1878406a830a785ed08d9adbb","sha256":"24cbc4e4b2c15b32036fbb84d653cb480e0818fda8318d2a806d8c3e8666dcdc","sha512":"06be73e2b9709f0164075b7fe30d5f2c03288af4d97b5eac9c0d77cd04b238efe0bf6dd746c6c9063b2f2edd00fa981d58769f76a1439687e7b0582a4d78167c","ssdeep":"","tlshash":"b421d6e238630473061625f7a93fb188b479341e2e0dd821c04fd9a839a9fdf81a3a08","size":1405,"data":"","first_seen":"2026-02-24T14:23:51.476805Z","last_seen":"2026-04-21T21:26:35.834864Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-04-22T00:02:58.101993Z","times_seen":28460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/if-defined-CWaLTnLW.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","size":53241,"data":"","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-04-21T21:26:35.697782Z","times_seen":581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/GameSuggestedEventsWidget-DZ6HUrEn.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ca5db02ec6d235cd64de2a6a474f33f6","sha1":"25b848c932d6face1ad43177f53b1d3032b0fcfa","sha256":"adcca01c8b00bd4e28badc2e707aaba8b035f40cc8d4ff239e7ae508dfb79349","sha512":"76bfdfcefe35441f326e410aaa2d4a801c423edab5c999cce894894adf9aad5eb6ac478426ab9ae2efcbfbc3e97a4f75744956a2b800c1072d9671e4b16c19e7","ssdeep":"","tlshash":"6c71d75ae010aa39a13745d82bef3119143632b8b94353c1b73fca7123e11916b5bbdf","size":3726,"data":"","first_seen":"2026-03-21T17:26:39.604297Z","last_seen":"2026-03-22T00:40:18.192831Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/useJackpot-BDZnzus2.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b91eb26317c6780c283223b75661a38d","sha1":"a0914abf4e0d8af2b94ce95c878e0a49ea138cdb","sha256":"0c253d85994a8748550577e8079833492bdfd33a1b82fa7314770e22f81bc51e","sha512":"410c33c726832bb0286d9a569b16e16b35697721b3de1c84f4ed5c67e60a40e5671c281a1a57639c6341c438efc5477beb869b37b08a8f69748cb66dd2830bde","ssdeep":"","tlshash":"46211045c069e5f8f48d8cb10177cb2a1b3c3f7a7440e0a0a0ba5ebd57a8d41b6a0f92","size":1419,"data":"","first_seen":"2026-03-21T17:26:39.469762Z","last_seen":"2026-03-22T00:40:17.938534Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/CasinoJackpotPools-fAp_tFNt.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5918d349ea75aa702165e8b092d3b0fb","sha1":"753be348a9b1bd9cd842c8d6a3df0ecf613f9226","sha256":"7a95ae3b8b2ad563cdfd333ee422aefcf2307238e68e01fc031003f559450718","sha512":"de4df633ef185ed57d2964b09d2bbaa88b47a08b90463bfd9677bb3c6bd777f4961ebbe889a80df9636576890ff9d1bb27a2e052618458bfe4b1960a5e9fc248","ssdeep":"","tlshash":"0211008bf02bf3f4c88c08e14079495a073e2f7af71181c0946c5a285b66847f5a87c6","size":881,"data":"","first_seen":"2026-03-21T17:26:39.606633Z","last_seen":"2026-03-22T00:40:17.962048Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/SliderMarket-D-md2TM1.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32d5d2bcf811f8d4c6b3a3871683304a","sha1":"b6ea75c35f6dbf3af65fa63667aceddb2f465e11","sha256":"eab3a50aec4e7691d32944dde37807869bc419ec8e7bed97f48c59acb0d85d60","sha512":"58163a7ecf99035db9755cb25ac4cbd82340113e82d909b582607517919cb9123bc734e6a0c7d0330e86cb9d1982b3f6ca7c1307bcf5d40eccbdc98a000a3f82","ssdeep":"","tlshash":"82211059e530e6b837668ccdc134172231351aa39bb4e2c1e06fcb111b38245b35fb26","size":1282,"data":"","first_seen":"2026-03-21T17:26:39.451705Z","last_seen":"2026-03-22T00:40:17.815239Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/tr/","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6f941adb2ce1c3c336f01b65e00b5b9","sha1":"225bb5c32199edc5a116b0b6108c4e5308b28e58","sha256":"3131d130bcb57e9c2593c009769729464af0ba726b8821274bcd76e44e283f56","sha512":"995db58cf4462f52c3f124666f58d5ad9725f77b17342864521087a05333bc53a776ce1c8d2d194b5c5880ee09b72f31aeb536258aec48b96a4de62adcc013d3","ssdeep":"","tlshash":"9011147d3ce76848d60e9bfa356f978d20b7b8155d40cd90c189c498a555fc800a5bbc","size":926,"data":"","first_seen":"2026-03-07T12:53:25.05797Z","last_seen":"2026-04-21T21:26:35.839446Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/67a3e7473a842732607a39b8/1ijc3usee","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"afe540b62e2273e43af099d554ca3edf","sha1":"6f266f8f1606f7e3e3d7d39bd7e4a7595d17643e","sha256":"798061d11a3ba2146ba75fb0f62b67d86377de87418e5b08bc98eedbce34ee90","sha512":"9d80f3226fedc9c7565c3e9f0c999e7c14f5c58376115429702f433cf8639f2df490e4f5520f4cfa3914ea1f06c893f51f86a23507a00a54e7c0ed8868e05c44","ssdeep":"","tlshash":"5b41eeea5b4f1c56b22410d90dbef90ef47720f749da5892d70c085272657ad2f8de38","size":2123,"data":"","first_seen":"2026-03-21T17:26:39.738715Z","last_seen":"2026-03-21T23:21:16.914293Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","size":10938,"data":"","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-04-21T03:41:36.055908Z","times_seen":26441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87f83aeea14051d9edd97ec3dd41fa0e","sha1":"8649c359a630d1c55eb268ff051d5a284ef7587e","sha256":"38a072ee28e39fadd2153244a3f0a48df473ce7d8dfe16e2f2fcbe5d9cd0bc6f","sha512":"c56e03220951ba738fa2f29bec6d02b1de5ca769f1f41c39ff3f12334b16d0a82db78487c4e4cfcd8fdfaddf4af6b923c725af335346028224efa849bc140eca","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCrGN//h6LiJq:SzP2DZSLi8","tlshash":"37822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-02-19T03:13:10.613764Z","last_seen":"2026-04-15T01:21:42.807167Z","times_seen":8478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FacebookTracking-CT90FiR5.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0d0301b2eca6fd01c8c09252d6d09e6","sha1":"ef908a1000f37352b6d4953e7c167a79b92bf5ab","sha256":"6481d9f40bfbfe3c886be16fa7c69fa8857ddd75866b867992f82ad05ea17071","sha512":"e76daf2ef88da9da386b72ea073a4c5b5d62606628fc178d1b5237675b33cab92443f01354e8ad9fb130f419fbec9a44119c02e3105d229e1c18cd644e4e2681","ssdeep":"","tlshash":"ab01fe0f2c45b479167c18b8d3bbd81425ba590a358f84a5c6c3cda5262458640cdbcd","size":680,"data":"","first_seen":"2026-03-21T17:26:39.417431Z","last_seen":"2026-03-22T00:40:17.952753Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","size":870949,"data":"","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-03-27T18:26:18.3083Z","times_seen":12906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"873c4df16225d1aff13e0cfde2b77590","sha1":"8e2af7ba18054becea9f8d154e61f523ec8d8336","sha256":"f33a56938e000ebe0e6c1bfe86613dca49faad36a8b87405558fcb72fb641f0d","sha512":"ecab6c4120df0407d7421671addbe86bcc6c96b04957c9b2ee3fb73ebb033ceba9eafb8fdfc6eea6511e79e369ab3fd78bd9be6ac01bfe56d273b0a2f34f8eae","ssdeep":"384:PE4U1NdzaA2Xub3Ormktio5RNLmMxSDymnaeXDxUpT5RJ6B:cVNdza8bNSRp14DvaeTeto","tlshash":"1aa2d7e975a1b526c1e3b0b0513f0a0ae1fb1951680c287ce641c5e47e70a9e982bf7f","size":22097,"data":"","first_seen":"2026-03-11T06:58:45.768481Z","last_seen":"2026-03-25T06:58:25.063456Z","times_seen":1424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","size":870949,"data":"","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-03-27T18:26:18.3083Z","times_seen":12906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/useNotificationsProvider-B6RWZkIU.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6a107b604ba11023c433398a7069f684","sha1":"530390a2949705378fcb2a483d2706b3de06d63f","sha256":"3261bee16420406d05ab5271fe9918ae8c11452027b028fbddee83b242e8c5b0","sha512":"fbb4b371e140541e0af34872e340d31d851f73ddb1b6731fed79b3baabc34f36179628277717b3d6fe082d81f0e2940e4d4a551a1ae0e1d89f4937a0ec0c5dbc","ssdeep":"","tlshash":"5bb01213485053f1210108ec12264c290e30083d3381cab11030414811e40c5930e905","size":92,"data":"","first_seen":"2026-03-21T17:26:39.536834Z","last_seen":"2026-03-22T00:40:17.926035Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/useSportData-D5mIIwaP.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f7bc8fc6052d5a655061f7542db1202c","sha1":"aab80cd0d185ea5888d946784ec94f8eabca2227","sha256":"d61d6440417a3709d55589c4c2f270ad4bc8a5639a7d27a9c0cefaf90a5212e2","sha512":"f783b09da3370e101d9e384a486d58f3bfde3019d730eef3934a85e1118b581dda88ecbe89de383af7011cf602f7c77da49aa063faa46101b264cdff3a3f36eb","ssdeep":"","tlshash":"b131874cd074b070953944d5d1ad6e14e434191d3b32eed1e85c0a197b6368e027ed7f","size":1770,"data":"","first_seen":"2026-03-21T17:26:39.579526Z","last_seen":"2026-03-22T00:40:17.780877Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/withPanelButton-Kc5QyNkV.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"716c41abf4e6c14cf885b87aeed6613d","sha1":"3284bee4f3fe8a1474c6fd5feb8aa09a3f8725da","sha256":"9a4fbb219ee8354bb94cde371f38b1fee6544c9f2b29d7549e60961847841485","sha512":"58d7ffd4e6f156b5d7b0138ae3a19ac35e0eacf9e1dd19fb3259989a19041331796417a74dfe218105cbc286386470c1cf38477e105107362cac2b0f032ebaa8","ssdeep":"","tlshash":"ee1112e4f5c4a9b2f4c41188577b2cb2759f32d9dce114d031b2c8da5fe8048991e9af","size":1089,"data":"","first_seen":"2026-03-21T17:26:39.44375Z","last_seen":"2026-03-22T00:40:17.873544Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/gameDataProcessing-Ks6c2N4W.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"562c976b249b698e612c65de5413894a","sha1":"97d5db7493db7fecba8fb8a6bd98788914477ce3","sha256":"aff1e7c461a2b4748712c13290cffd9c9cb82c20a5a3ca0cb69daf518b4259ad","sha512":"964c4854f9ae661cd8b9d22989cd6f6cef23c5ab7d06878f74436c982f64d30bce6680eb383af7636984a041791658ef520bc9e8f871c182b9231d24fbc76c7f","ssdeep":"384:7wphrrZxhxlVz12awqhvTXDsB4Pzenac0aw5K4A1nV:7CptXDe8QiAX1nV","tlshash":"fd72750b8a024c12c97e4639c0aa15f1b9781b32e8b8cdd51a555c7afb5fa5b31f173c","size":17258,"data":"","first_seen":"2026-03-21T17:26:39.382141Z","last_seen":"2026-03-22T00:40:18.016304Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-04-15T01:21:42.632515Z","times_seen":11130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=galebet1065.com\u0026t=1774113939933","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92e80acd778a61006c0de913088834f8","sha1":"90f81572d9661dd4efa3f19b3578fe025bffbb80","sha256":"037e29db2bf750693bdb5aba8c87f92a0d2492c934de4fb40d05c10952f5c05b","sha512":"cc6f733ef2b063057630ad89c51078a207d335af8ab052951a00e067ee7b3dd670dde49261f62c0a1aacf442bc62d214011943fe163a9cb27b5a953d77f7840b","ssdeep":"","tlshash":"3c5155b9ad99d1a9330a1763ad3521ccf97ec84f2a8b040f7a3d62c13407914da6ea35","size":3112,"data":"","first_seen":"2026-03-21T17:26:39.687415Z","last_seen":"2026-03-21T17:26:39.687415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/PromotedProductsWidget-Cu6mpMj2.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c3153e4aa4ebdfb11edb1ceb74721d7","sha1":"63a1c4e73b113fc5a7cf75360a42fa5e1d09007b","sha256":"0efd8b0b27b02dfddaef49296858ac0af81408ba031a3ecc38d2362f5b57f851","sha512":"31680001416098b2b40a7dd8905262064badc782cc6f7c7fc22afb10da2e29273384113d1b522894f476cf38f68e66ada739b7e8b3d94ad2fe13cb74e2086723","ssdeep":"","tlshash":"5a4175c2d838b2baf63e5cec214510c838267d18d96589b56077bc1a9139812bb57ffc","size":2125,"data":"","first_seen":"2026-03-21T17:26:39.657319Z","last_seen":"2026-03-22T00:40:17.80938Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/tr/","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3166d5139ebca4976a7df164026ff20d","sha1":"d7405b66cf00d1db4dc3140d6b1c63bca60fe4a0","sha256":"b297727d234af0837389b8bcaa1e72f4d0b62cfc126a4b9bb76201c5a52755ad","sha512":"ae0db71fd045eb0b103fd15902be9eb9a72763fc8494c7eec08ec13288bb0a46f320674f46a6467ba33f3869d3c388f15a83342bbf86aa38ef1810ed930d046c","ssdeep":"","tlshash":"4390024d71877261454126ed546a1016d3354480561c0113a7010081389814e42a5b8e","size":52,"data":"","first_seen":"2025-08-01T02:35:18.735752Z","last_seen":"2026-04-21T21:26:35.836785Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"795d84654feb099eed77d853a9826bac","sha1":"9d1bb066ae472d0b589ebd3c25d1cd2125d9173f","sha256":"ff8a7dfb26de0d9a412cd185e33fe73639c29abca50700e11c3ad7480de7c09a","sha512":"75a841715cc1b55c0c1b1508d8977d36d54e715de6da9d58ea5bafcd7919a297aaccc79fb458dffc436a063b646476d66fb78d0c570a9d94423d12f30ec85555","ssdeep":"6144:FrL5bRuPtxA5oJ8T4AfICc9JKwpm8SB2S5K2wzO3F1n3wRXG:FrL5bRuPtxAbTfICao8Md7","tlshash":"388419cdb7dab4664393a474903f018ba27a28e2b44cd894f086dcd43e706aa5177f7d","size":399907,"data":"","first_seen":"2026-03-21T17:26:39.641488Z","last_seen":"2026-03-22T00:40:17.783218Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FeaturedGames-DmW74qti.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d9e6b05b0ea4c2aaf5ff097f62ec60","sha1":"74da87d2807e21cbebe3f99804c583b50dc62a6e","sha256":"1008f34230526be542075acb3e641fda44c1617623c017461ba74c923b97e742","sha512":"c59507f99048474eb0597fcc27a39d06f2b2d9231d85354a2d78d12c6ca76c71b2a90f1d4d56984429591c0cccefa143a20eeed9eba60200d42da244f93e5375","ssdeep":"192:xPV9D3fNHnEUDuHDY2bBEoOhC62JmMwL4Bflg2yD+l:FXVHnWHVbBE3hmS2Sa","tlshash":"69f1fa0ae015fa7de67b49e7b53f5108f47a0ad0e7280890d07e5e1919e9246733ef8b","size":7902,"data":"","first_seen":"2026-03-21T17:26:39.389562Z","last_seen":"2026-03-22T00:40:18.039261Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2363889186e23777b4b704661794f3d","sha1":"7f50ba76565cbebe1ce54ed6e30f3794fee96554","sha256":"f71def488c2fb369e417b84e2088a8c9c21a59a3d1dffe4a43f4dad196460b8c","sha512":"4fb51fd523149c9cb04134a77d41461736a1e832dbd48af01a71d47843a56fed5a4474275e8752a2460c3cd7203bbbe9fb897a4c027d81a6b446973169d3eea4","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+w7b7EqGDeuPLK3c8WsIJS8oqIpCFaFIpSAJyO:xGBzd6BgJn+wT8ZI3I5Z7y+","tlshash":"688533582a6bf3849409d0d7f9373d84c59ed19aa44764d24fb24bf31bb2352eaacd03","size":1831195,"data":"","first_seen":"2025-03-04T03:23:02.060485Z","last_seen":"2026-04-13T13:13:58.719874Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-WIMCHaiu.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9b2782650ec3bc7acdc4746a40024c65","sha1":"6eff74730fa0eda9e5abafaa734c505751244788","sha256":"156c9584ae57455fcccc4ba27c44cf9a380e5e904a06092bae04b487ff57ca69","sha512":"0391894fcdf91d6ec313cda92e3af9aa61e90a611157bdb38e1853002c4d23cfe88693ab8f96be3e5c8a70d6290e505cecafb89e1279d08fd59d3addd635a4b9","ssdeep":"6144:MfeL9y0h4R78o8e4YaIALoh6wj9Sd51jjVvFavIRcDGRD6On:MmJy0h4R78o8e4YD/j9e5xavIFROQ","tlshash":"6e240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","size":221144,"data":"","first_seen":"2026-03-21T17:26:39.395349Z","last_seen":"2026-03-22T00:40:17.969853Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a36ce66e03dc32ad22729756ca4efa7a","sha1":"c40a4b89db48763db8b028e4c7eb15de42f7d56c","sha256":"713aaa8f86c6f7136cfb136ad2457b940f5713706203faf7c9cf681686586a75","sha512":"a9379e8e6443d8ca392cb0575c4fc0f970e1bbf991ffc40651deff79e3ce81dcd8379560dbd68d441039363247369e166e6d4c06ab866a7b5e3734b775e0e21c","ssdeep":"384:iE4U1NdzaA2Xub3Ormktio5RNLmMxEDymnaeXDxUpT5RJ6N:3VNdza8bNSRp1mDvaeTetk","tlshash":"8ab2d8e9f1a1b526c1e3b0b0513f0a1ae1fa1951e80c187ce641c5e07e70b9e956bf7b","size":24128,"data":"","first_seen":"2026-03-21T17:26:39.759892Z","last_seen":"2026-03-21T17:26:39.759892Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/useOpenLiveChat-BqpHSaBt.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"681eb5126f2ec9c2aba7812d2e626840","sha1":"9ffe76ca1e901f691ac60faef61309d95902c760","sha256":"b4809c2e970036d0b7d9254d9d823fb9b020c888f18f71ed96f3c22224f9cb54","sha512":"b2dfefdd86cdd501c26c715bfd02b9f1a64a8145710d4acb1e91f57fa2fa4b0db743350947a0cefe3d5913be116aeb6c1758bd8f1cb54f07c8942c7fee79c554","ssdeep":"","tlshash":"0bf0e19e86544e7c81c0ced1516be5f85b3c2ab4300cd851a93b6cc8682484457bedab","size":583,"data":"","first_seen":"2026-03-21T17:26:39.588879Z","last_seen":"2026-03-22T00:40:17.995274Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FavoriteGamesContent-c3zcF83Q.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e29f6fd42cc0e7d08454249b8d89109e","sha1":"89670d6405e765f3e4c1cd7c85802207a0cdf2c5","sha256":"c7f4ea3c2548373b3ba229583feff8cb4210b7a73bca5591238e0326ecb6a6da","sha512":"c89f9878f8930ee2233e1a29e1fc7e09d538d9d9fdefb58d62c1774716de04c01ba6226c2b9f0ad60d0ca89839b107131872c8bb6a0fc6e2caa8442ce9b6ecdb","ssdeep":"","tlshash":"0051840050415ff9bf8e9eea6f2bd1941979034c6686c17da8784f3d2429a41713bff9","size":2785,"data":"","first_seen":"2026-03-21T17:26:39.612494Z","last_seen":"2026-03-22T00:40:17.793637Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c95c276dd26ae680ceaf31d168d64f0","sha1":"0e7d39f3b467ed3ec8a74928027bb1c061fcb752","sha256":"ea34db2dd7928b065a6bfe5171d849504db51bf730a5d82c850d7d652752916f","sha512":"a9058cc64544efe7af26ba9e09bdb5c7d8bc7c77ba377e080f49e9237a7ea315588643c34bc92c76528b158850c2efe666665ca9ff1e4c3e4f619a9680e7ebc9","ssdeep":"6144:VoJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:l4RfICAbHm8eeBUX","tlshash":"2ea4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","size":465712,"data":"","first_seen":"2026-03-21T17:26:39.643432Z","last_seen":"2026-03-22T00:40:17.988837Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/firebase-messaging-sw.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44b92a7d10cb0970ced5798c2eb1b8ac","sha1":"819f60615624f025d1256efc408d8e576a909c7b","sha256":"a87215bfd90d96fb55335ce2b2411f38074588149c9e896505cb10b250e17e1e","sha512":"75c55da9e8afbd96b6219292c91fb88e01c15d20bafc974028763227220aa042f4b761895d44b0394baae53c225e9b0c109d2eca333aad6b382951a60448e8fe","ssdeep":"","tlshash":"5121cb124be2f8231e4104c7679f32186e290d2507b0f1de61bf56b86b0a57b206bbc5","size":1125,"data":"","first_seen":"2025-12-24T22:39:16.149326Z","last_seen":"2026-04-21T21:26:35.827176Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galebet1065.com/configs/928de3c284a560a4ec2990544700741b.js","fqdn":"dataspot-int-bucket.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e2a6c49770a52100388701459104032","sha1":"eb58c40e53a15e3b55fd60c07276e5479e07a89e","sha256":"161586af456353acc3ccfa1748aa3886066bf8f3c5614a5c4db0e4df676adb2b","sha512":"b601200e6ae6894ca67b3afc195d37fea9db1864900cb63b60428df3f106c70ea2e379566d43c326c3b7d439895f609866b2c4a54d77e7a2697f066c05db6a8a","ssdeep":"","tlshash":"aa51f31578e21e7300751435a55768c0b422bb47152ad88c3bce760c4f7db7995b5b8d","size":2471,"data":"","first_seen":"2025-12-24T22:39:16.396562Z","last_seen":"2026-04-21T21:26:35.793924Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/tr/","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ab5194607d8db08f9abe85264322389","sha1":"105aa6a7c0d330d097cc7c9f6989d8223f23adf1","sha256":"3728c769109ca09c38155c787c6e13da31835fc34bfc842f7415f3d3eca691c2","sha512":"c48df33aa42a930e98ce83dcaf1dc59293d777ed22f746eb7ea8e299fe1622aec1f07ee914f18decfd1b998bcb691f84f58a5219a5e5ec1c230f9db6a331de8d","ssdeep":"","tlshash":"6ae0a31d1c1eb46227b419a8e237895530d5130529462655cb87d4543971cc554c6a4c","size":423,"data":"","first_seen":"2025-12-24T22:39:16.410899Z","last_seen":"2026-04-21T21:26:35.84277Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/lodash-kwDFPdct.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"12e56cd99d8f0069e4ee81a372fe541d","sha1":"44e49f0b5438f713c4e9cf76e3659a00ffd35e87","sha256":"d77e40234c5d8cda5978d85ecd94a77ad1231619bf0b371d67fb2f3074e96425","sha512":"69908919839d062f0d861cf4591600c01193ccc7fd4438009bafeff34258217d381b6581a2142725c495a3a1bdf7937964c90108d0a6fd6e01ce2b90a854e9a2","ssdeep":"1536:RU70QnXcPZMTC7X/7crNuU0OCbgjE3mhgELujQjEO6epU3nddIIBQoMbPDFLufvn:RGc+rh07XgLujGEOtbavkeLkDYlwMh","tlshash":"74f391c835d7f4a183a7287440bf084bf23ead65a84cc550e1aae0dd7db8919c277e6d","size":165397,"data":"","first_seen":"2026-03-21T17:26:39.43969Z","last_seen":"2026-03-22T00:40:17.967811Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/CasinoJackpot-B9xPGuUB.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c681dd00011ca8f396b64d03b78c8d33","sha1":"984d629f7a1c2f7d57a81c77cfeeb02d6d851e53","sha256":"cc99cd3a07b804e7ce37254db7c6bebf70961a2a0284038437e5dedda04b7279","sha512":"0fddbf82b4c4250aaae9c53cc10ba58e7909eaed6003bf15e48780bee54835b67ff55a40cd92ff4cdcdd8d8ceb6e786ed4b3f85863ccc23d29b3a37a5b402742","ssdeep":"384:bm6srKqqF3EjFOFEGOpOpeHMtGRxeG/Pcy7x299pP8FJgr:bmB7CEGOpyts/U3Qgr","tlshash":"19525c05f012b7edbcad54f7887ee0297a5e1aa9c71808b8d1bd6c313c2c855760b7ac","size":14339,"data":"","first_seen":"2026-03-21T17:26:39.564114Z","last_seen":"2026-03-22T00:40:18.034532Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/UnavailableMarketEvent-CEcm-hzZ.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0b0ac8ff4ea1cdf1c6e3218d90af5f8f","sha1":"560311f83f0e70f7915a340a709fe175752e98a3","sha256":"7ae2345a86ab8a00f2b0a3019769022692d90986cb2a311f42aacf61a63cf460","sha512":"3d2d8cf095d4b2a186b587501f0908a86da704cfbce63b6f5943da761aa4661d7c352d57164d1ea49fbbf8a17c0668bc008b062f0fbf409e30b41ed85dedbd78","ssdeep":"","tlshash":"bce07d09b004bbfac02518ccce3e4f0d541207a5c7e945d391a910181b34261350ebaa","size":308,"data":"","first_seen":"2026-03-21T17:26:39.660084Z","last_seen":"2026-03-22T00:40:17.841734Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/DisabledMarketEvent-CPPtnhoy.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1ae7d8c222219b66a065ab6cd12346b5","sha1":"cd4e545ab58eea2dfb81e019db83b0c38aa163b1","sha256":"91e1c015e24443ecc166b3c80d23084b7202fc955efb7babbd75894b28316f08","sha512":"ce552e1c0f5315387462390ae80e21eb8ac37a8f52c4ccfc4db8b5a9ba3cc9f9b59c4582f2bd40031f7e198335795efef3aae2da13ca499359d5447a527b322d","ssdeep":"","tlshash":"cb51846df290fa7d993a04dcd23b1f1f601913e2c6590992d0be8c29151c0ee326efda","size":2717,"data":"","first_seen":"2026-03-21T17:26:39.419582Z","last_seen":"2026-03-22T00:40:18.068229Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6ecbdd6e5c7c35706e6b7290b4e711a","sha1":"e7504332313b5faba158d3371019ad44fe8949ba","sha256":"1d0520b144e29124777398bb9dfff2ccf5663f45275ceb1c5f70e91dd297ca99","sha512":"ff20dbbf2ee500ce426438f4a1c77da9d52c2138d9c1ad5c54311f0670b7a4ee6202ebd366cb291818dfa5e2964647c945f8d9e5c057d32e12726b2145ec6efe","ssdeep":"6144:V/J8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:Q4RfICAbHm8eeBUX","tlshash":"d8a4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","size":465721,"data":"","first_seen":"2026-03-21T17:26:39.447772Z","last_seen":"2026-03-22T00:40:18.112422Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324696,"data":"","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-04-21T03:41:36.073067Z","times_seen":12668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9b77d649190225b6cc73b0a168a1bab","sha1":"0dc6bfacefeb0c209b1eb709b01d4cb1cf60049d","sha256":"19ee39e052eef81c2d5c1d4333349d0938056b7e1c68633629e36be3ac0854bb","sha512":"e89c046cd072b763bb6edace006a3afb9bc99dffbbf9b94ef03ce5f07f04b7e9ff7044dcd1a24ca590de44cb8e25e413e9c43cfd34333fe39c7ce92e4640714a","ssdeep":"6144:v4iJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:vG4RfICAbHm8eeBUX","tlshash":"1ea4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","size":465790,"data":"","first_seen":"2026-03-21T17:26:39.63504Z","last_seen":"2026-03-22T00:40:17.979741Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/jackpot-jNbP6Duk.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c4e89512f1192d8bdeb452c2cce992bc","sha1":"1d30070e7d0ed0838dbae22c81c41430fb3d0d45","sha256":"4a7f2a8747580d38cb522b361b5cc73a8ebcdb6690f3f8d92d7dded5be8a36fd","sha512":"b548c62816c00d3df156b43a8e608d5d7de55931f121ecfda4e7296e5cd65208ffaf60871ba3b035cd43b5e2aae82b0965329a8c9b5a0821de5a23fbdbc12626","ssdeep":"","tlshash":"00e068eed8c08dfb967007552bb018840e2416ca101ec9e4be2672611800b8828f8239","size":376,"data":"","first_seen":"2026-02-24T14:23:51.255604Z","last_seen":"2026-04-21T21:26:35.58754Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galebet1065.com/core.js","fqdn":"dataspot-bucket.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"055db89d9f6b86d5497ec019668827cc","sha1":"a86074a3089454d5f51c83593a5b0e983610cf7a","sha256":"dae03523f64a6f242f1c2cfb89b2d39434c259c1e29e2c732d36969cd439e606","sha512":"2d5eba0dbecd7a61b9975b36bb17946ecdc4e5e67311f516f5b29b196c2dec7f367afb7be8ae64c71062627d009bda8eb21a58161a663d2b4d954ad988034133","ssdeep":"1536:xpKZqZWm6P+GgMwnm0ub2xiD/hIbq/Z3qDPAcnh:KqZYSmX2e/hIY33ch","tlshash":"fea35dc5b1a164f083939bd1d4750253e32c6865390280dcf7bcdeda6f299cab166fb4","size":99790,"data":"","first_seen":"2026-03-21T17:26:39.611092Z","last_seen":"2026-03-22T00:40:18.191048Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/tr/","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"73b8b49b4f5dd8adfdee877cd58546f0","sha1":"9f41caaee4b514ed017a6258c4a2166e6df5fad8","sha256":"b8ac084bd8c078db89ea019d31398c712a77cf27480be3b2aaaf7754615679ad","sha512":"b0dc33f21d8d930095dd34608c4cd501b4cecd139e1854fb636bb4e0d1722b22bda57425ebaf257860fc364a6ed9935865d391026a55c36bd7cbad695321d11e","ssdeep":"","tlshash":"6e4120b937867cb200f96633d6af771734f5d071d4018c10272adc896ab9d6a41a7c6d","size":2178,"data":"","first_seen":"2025-12-24T22:39:16.422871Z","last_seen":"2026-04-21T21:26:35.841964Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/GoogleAnalyticsTracking-DzsiAHbD.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c30b07b6e6d96a02961fa121d936f2c","sha1":"b9a4142d99821eb90ab286e8accdd5d8cca5497c","sha256":"3b654664159054341a4e796d088aaa15d5b0ae7a460e47c74748a3768db23406","sha512":"f10646c49bb35a7ce60f4021e5671e9bf71ca8e2b1865132dbe0b0c70794ed01afe084d178b81be5435d1efc99ed275c78aa0afaaa2a94d4b5eac54c79d694ed","ssdeep":"192:sWYceR0SE+m/CTb3bHXCT76h1QxGE0VK7D6L7kBNrnPsh52Lz2PM7mBE:1YcoE/CzCuEP3Bky2PdBE","tlshash":"7852b55c32adb0b682df6054587f720bf1755910a458f480a265edf46ef8caf02abf36","size":13704,"data":"","first_seen":"2026-03-21T17:26:39.415393Z","last_seen":"2026-03-22T00:40:17.807909Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/userJWE-DjlZLNdN.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"508c7f0a90ffbb5b03c98a9a7dc24c36","sha1":"b9e31f5961c5466efe981d1e76f0d812c251d678","sha256":"8deb2e3f97ba996e49168980142a357c49d4641bb9e2278358c5630cc64cfb8a","sha512":"a6bac2efcf8d93fc449c37c3606834bd751181d3ce3381429e8c5f955c263a4d0f582e8a0e13a584fbe412848395e8ae1f730a2255ab5162e4c53c81163a5aa5","ssdeep":"","tlshash":"d5c0c0db0cd411f7c5583c501007dc138230391473d8d3525b08c3ea7e5104bf10ca14","size":193,"data":"","first_seen":"2026-03-21T17:26:39.726618Z","last_seen":"2026-03-22T00:40:17.996301Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","size":75107,"data":"","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/events-CcSKgVKr.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6fc0eef96fad08bb59201d62b01a05a3","sha1":"70b77730ce38865b4743bc672d001253ab6f2840","sha256":"a47b119988977abcd7e45234a7b28325876a133c1b5acc203fa7dec725fea22d","sha512":"75496f580eb9eb357e8bbb21a32ac3021a3c8289ec816b96f412047d8ed05915fdb06a40db5af941985f0039d0ff6cdcb2b99f3ca5d222041be0b647caa4c816","ssdeep":"96:0d9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:03IM2sWMtBq6n3PzH","tlshash":"05c143ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9a4126fb8","size":6141,"data":"","first_seen":"2026-03-21T17:26:39.445809Z","last_seen":"2026-03-22T00:40:17.797546Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-04-22T00:02:58.084467Z","times_seen":50423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/usePriceChange-DGCuPhY8.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"985c9befee4d6eba2e166d88af88e692","sha1":"613a85f6f6f82454339d05b495353d2a2d82b9b0","sha256":"4eebab780e6e5cacf96c52faf820d5e0e49b9d80b7aac3bcf1dfaeecd2c342e6","sha512":"87b7284f4b4786f6d426342c1285b6e7fc8b539c311551cb72f12da1169e5954b28d2644e22e4f62e7e05740663a80852ce88b3ef1fe8a8895b86f19d66a6c74","ssdeep":"","tlshash":"e2f05cbd24901823545f0cc4c26585571fd126d56bbdc31eb230cc2d37589af066ee6a","size":470,"data":"","first_seen":"2026-03-21T17:26:39.72857Z","last_seen":"2026-03-22T00:40:18.012304Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/HorizontalSportsList-DFiYn3iS.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9e97ea9cb856db5aea93097b24ee839a","sha1":"3216ec0dd353cfd8cedc5dcb9bd06e0e6c04dd2f","sha256":"f0d7ceae5b03c9848b3e7891ff4b73462b8aaba69044516382b1a93b9369f97d","sha512":"14d66003f13803ceec3064b27084a362f95a796ae8724feaaa0596aeac0f16141f26adf5660e396af9ea9fff16e3d322c005a133c116c489f80f414be0fc1850","ssdeep":"","tlshash":"06e02b81d8618ef55a2a88efaa5c24846122087cff47a6b1d29492182b7508bf72a40d","size":422,"data":"","first_seen":"2026-03-21T17:26:39.547601Z","last_seen":"2026-03-22T00:40:17.818577Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","size":60965,"data":"","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-04-21T21:26:35.769117Z","times_seen":323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/SystemBetCalculatorContainer-Bzc0pnS2.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6b4940b55d134e31fa03de3be679852","sha1":"127e610a7ad135553e3e7ff1719c5dd9f1c75006","sha256":"dec35ad6b839e544e8099d7d818aaa3a88db1ad559420bcb20f658e6baac2683","sha512":"b9020ec0e2690c517e86236c6c6d27f0ac074daaa07089aeadc99f8ab99c465223f5067a1ff613bca023113d204bbdf8242ddc2913dc11b38ab1d96370e65865","ssdeep":"","tlshash":"6c11cc566329cf70c49e0ee20a06a4540df50a29694cf628b6f18c38e01408243eeffb","size":888,"data":"","first_seen":"2026-03-21T17:26:39.405862Z","last_seen":"2026-03-22T00:40:18.114421Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/AiPromotedGamesWidget-Byj5O19S.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84edef470c315c31d3de5ed0b5105d95","sha1":"635ea115da194dc2ab021eefd7e1bbfefc98e181","sha256":"1843bbc55023e4f235458fcdaa749beb69d2142f16b74f6e32a856dfab2b77be","sha512":"696adaf49f0aedb5ef049390a5c7df027af83e4c4454986f813d7604bfbe26337ce2e3a64be60378c83f166536ac28161aa909a88837dff435e4d6719699beb6","ssdeep":"","tlshash":"8741642bb019ca7cf22c06a05294f745a42177bdd769a0ecbaef1900731409d337df85","size":1924,"data":"","first_seen":"2026-03-21T17:26:39.577171Z","last_seen":"2026-03-22T00:40:18.077623Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galebet1065.com/configs/d212f7f1f16e55d50593214ba05a0f99.js","fqdn":"dataspot-bucket.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c502cf55b2a3f78e648f2bf2b2eb6582","sha1":"cd87424dc2922aaedb4d7418e581a1419e8ae5db","sha256":"24f898e9c39f054c6511010c44744db4702dcbf9c75ae5cbacbca2fd852f50bc","sha512":"ae83a469460b683155b1c51ce1309db2b9324f146a6274fd33a18d7b5e2f6807baa4c9d049ae330e03917b4bb85ddaa33122250a7e286aa541fa0fc60cf7ad97","ssdeep":"","tlshash":"0221e49664d8bf7706f01ef8e3156a48b4567f487031c849529fa89d6c214c24579f8d","size":1150,"data":"","first_seen":"2026-02-24T14:18:16.940585Z","last_seen":"2026-04-21T21:26:35.738939Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cebc7667967e601f02df39ba19712d86","sha1":"c7d3677008d76115cc41ba1b734aad112c743dbf","sha256":"089867e58a1de5998b0d74b779119d8a30fe54616ea3ce76063a5530163febea","sha512":"80a26888852e4a15ef49580494958b710628b404f4026c5b218daa918280b24a8f2fcc698ac49ee66c6e9b91954c54f5f296abfd4645d71cc32c83d4ba199378","ssdeep":"","tlshash":"2b01c07d5b86312454f634906b2bbb4a743b12be5c535808848d0414a3a8bafa21add8","size":697,"data":"","first_seen":"2025-12-24T22:39:16.348988Z","last_seen":"2026-04-21T21:26:35.711167Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d894772cc8ebc08c554e305272fb743","sha1":"9630696cfb8fb02d834b6c2d590ebecc9e4c1971","sha256":"8822f04d16fcc6ebe390ead32df5d08238c7c383f466f401ebd9d235d32f434f","sha512":"20c22c322a8e6d0cee22113e4bdef0fd06e8b21ab65665bf648a3dcbe3857fad121cce2043bc46551247f2f88af76efcbc8f3ba5053a820439d0383342fa0728","ssdeep":"","tlshash":"5e511f3506b31521036b206c3babe316b23ad2433548f5457e9d93015f45f79d9b2bde","size":2492,"data":"","first_seen":"2026-02-24T14:23:51.4869Z","last_seen":"2026-04-21T21:26:35.837581Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/Tooltip-BFFrse_o.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5dbd6b1605963511da70c190fb431076","sha1":"32b83b773ff51e26a8bd8f6aeff9240609693883","sha256":"f8a2abd269bc866e1a5ae41159e53934a8d94ba6f6f8492eed8485e7e3d4ea31","sha512":"d09ba6a204efe8e82fd72310385d53c4c6fc14515407c0ba66c041ddc19ba91768fa100d5ad439a6362d8a263c8610e9a5bf86cdf8310dc55ddd146b64c2b9ea","ssdeep":"","tlshash":"0f01c246e032fbf4a17654da142e856d7153266c7e2f58f16038058e0ae4984d317b8a","size":820,"data":"","first_seen":"2026-03-21T17:26:39.364122Z","last_seen":"2026-03-22T00:40:17.826468Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/SmartMarketEvent-BbcnqqZJ.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f2e243077781c5b4c30585af2daf3bd1","sha1":"7de46f25b06f1b64016b2f8ef354ecec2ca889c0","sha256":"88032c64572d2bf0740a517c16a6490fa0e009974f8fd42bbf8882e5a4937932","sha512":"4f46dfc7adc759e6df653732f6f6f1d2ad05d75229122d62478d3840ce62813a7f9c11d5c16b23ad193f158972e0638bc3f97e587dcfb8b1e595636313672fdd","ssdeep":"","tlshash":"1911cc96e480723a0672c8bdd1109f42416812d7db20026ae58b8af173ae0fea24ee5d","size":915,"data":"","first_seen":"2026-03-21T17:26:39.407622Z","last_seen":"2026-03-22T00:40:18.157676Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1337software.com/jsler/16bce798aa7eff0a39106e935a4d41cc9c5ec31bef333fccde989abce04a699e_588.js?v=1774113931.702","fqdn":"1337software.com","domain":"1337software.com","tld":"com"},"ip":{"addr":"104.21.18.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c550f8f856abcc53f961bf77d57d4be","sha1":"5ff8449e0de203db2f23a382612ce850fae8cef1","sha256":"0566b8f6f7df7a815049c24c6378f0d06ceb212996d74908d77137583971bd56","sha512":"680c5cb634e7e41b4de41e2d0be87e396c560600efcfe7cffd33eff66cb68af033f73e5dc44446d09095ddb597980ca007a84e609ba3a403977c5d6d2fb20201","ssdeep":"384:zUBbl8dYsbOSLiwi06cZTfwzHzbllIZVHHxGCEfp:zUTpN03ZTfwzHzOVnxGCEfp","tlshash":"f40330dba56305f105713aa07dd55aecfb86805bd4040ea27bbc021e0fb287ae6e15fd","size":41061,"data":"","first_seen":"2026-03-21T17:26:39.568179Z","last_seen":"2026-03-21T23:21:16.956422Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-04-22T00:00:41.102401Z","times_seen":45654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","size":53530,"data":"","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-04-22T00:02:58.103121Z","times_seen":28313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/AppSettingsButton-Z8Uar99K.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89a30a627156dc5f5d2c27520b8dda1a","sha1":"7b42b5f3a628661504fb78adb51f204d573e286e","sha256":"622f3d41c1979a9d6e6856504b9bc1c5f1afeb02f3ca7c0299060843da6d581c","sha512":"46e969cd79931186b55227bfec7a5bf3eaa2f2a2538d294727796d70f30f17591ee2e676ef5695a2b5f163073d8124911f6257167d7c1c16baa75bc2e666e921","ssdeep":"","tlshash":"f5e0c08b91c2d2fb07d27ed1c11fc50179267c38d788d94140bc649176f02c6d14ea6f","size":385,"data":"","first_seen":"2026-03-21T17:26:39.599828Z","last_seen":"2026-03-22T00:40:17.805928Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77424425bd755d02077922d40a96c207","sha1":"9702eba70ac4506031d55a8c9cf6732a66853b2b","sha256":"1128f463d0038310bb65c71ee2bd50f52e40dd9dfc0489e127f3912a1aa728ce","sha512":"2ac723d6ab08dc1cf45141cc44966d9b0f01c892511f40148d785de61ac084e014799555bb3b574f6f8b78e9410df8c112fd437eafe0aa747babdc52b451d1a7","ssdeep":"96:zNC9Hqt7pEma7hY/rcKaJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYcLRIvgx43nVY","tlshash":"13b1859ef247b456c156225150ef3b1df33a281ca61ccdc8a66565f218784cba077b39","size":5261,"data":"","first_seen":"2026-02-19T03:13:10.646706Z","last_seen":"2026-04-15T01:21:42.571941Z","times_seen":8490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cc4c79f869f2d2c8de02700130947305","sha1":"2c7eae0dcb3e67fadd61a6971d49165477e588fb","sha256":"6b0f59a985ce574fe2f65a705cb7f2fec20f7935f0440ca4cc718dd5cb25165e","sha512":"4a0476a39e87e56247fbf951808d612e1c13da2ba2ddf4c7d9027913c227a498e74b11ae42a127d90abebbef736ebe2949366b685cce5f800594dd5c3ac8f769","ssdeep":"","tlshash":"f6a022200c222f000002ec30023b20082f2f088000e0ec008c82c3003330e8fbcc2c23","size":64,"data":"","first_seen":"2026-03-11T06:58:45.739537Z","last_seen":"2026-03-25T06:58:25.080586Z","times_seen":1422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/LiveChatAdviser-D27OhzDI.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f2f2d7d30934cdc6d0c21e68d266516","sha1":"e2f9d76a03d3b6486f98e28063874aed70597f6e","sha256":"c0679235f12e7fd2c68602e19e347b02bfef3b2294537a021c919947c34ad810","sha512":"ccfbb78a037b16838f08bf177af40478c903b90d8625a5ce72007afc3b19f6afd999668179c42580a4c0116dc034fe2b3ff63a69f1c48a6bba666596391e3836","ssdeep":"","tlshash":"4e115295f0c2e3fd6667284dd7ae2043700a4fb5d22d4db6807b19601a2ce09e30eed8","size":862,"data":"","first_seen":"2026-03-21T17:26:39.544297Z","last_seen":"2026-03-22T00:40:17.804736Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/DepositCountTracking-CxmA8res.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d4ba86dc1f2979b2061087e4b65ae2e","sha1":"c36d25550b91506c59fc28a1c9b6b59a818cb8f0","sha256":"0b444453f7ba634138131d4bab736e6d47b934a22a327e836cb1e4cb7f40d07d","sha512":"f5430ddcb6442609556f2f0d0aa7898a44c81b15386b06983ea5d12509976d70f1a6586b8c6510362579762c4634075f1db1171cf6679776be80b3aa1601efff","ssdeep":"","tlshash":"7df0dd5768b8d5f589493a8072c798a362f0791db906c8c386b98d470208042e4ccd2b","size":645,"data":"","first_seen":"2026-03-21T17:26:39.534402Z","last_seen":"2026-03-22T00:40:18.198864Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/InternalDataspotTracking-CwhbtXjZ.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6501d6c8862a6d97a90d85ed74fe01d","sha1":"f129d89747618d4ff3906dc5c64cdedb38fa4b2b","sha256":"33b71cb4a506d6d28328cd654361c176eb5182f35f87730ac6547db66d7ca1c7","sha512":"eff2e7892fdb17f40b5e9e45327a5c82e65915865d019ba3e80189773fe7d2da285496dfa7565e3014fdd56081f51cf05f2cf453f2de37b86e86fc2be81a3994","ssdeep":"","tlshash":"7381731fd83c05b17064c9ce5977a997c6a83c8e51c0c8f0602a9eaa561be04dbf6ed7","size":4061,"data":"","first_seen":"2026-03-21T17:26:39.587133Z","last_seen":"2026-03-22T00:40:17.831434Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-BnlPX2hH.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceba5fdbbb3a97901b9dc8c2ad5b13da","sha1":"34eb6dde8211dd82b04e0b064b89fd42c9347721","sha256":"ad91370fb603d1ae1fb182b1dbc011d8371c2d98850658bfdd0177eeb6d693f2","sha512":"e971aa680fdb7fdcf8ac304ba0062cb5cd618a9c2b95eeff80250378e39441a1e4098440a3c80ad3f6d6e0ee54f37e54aa74ff34b2f200af61b68f72cdca9c45","ssdeep":"3072:mbwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:2whFHU4HNwFH7MoOWexZFHV","tlshash":"02f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","size":157556,"data":"","first_seen":"2026-03-21T17:26:39.513457Z","last_seen":"2026-03-22T00:40:18.06025Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","size":6791,"data":"","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/getLiveGameAdditionalInfo-B63DAlG1.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"81ebe665808459b6972bd41e409d2812","sha1":"aaeb597dde98ffa62584343db6067d94ead9998f","sha256":"7009459d3d46221c69360e4b75900b5915e58f769e93042ce6517ee95c856afb","sha512":"5fa482fc2763c005e76333b79999e5a4115fdd63a3472b1328c7700eff2291336c84f4f12715b6a0f2f91faa6ee1fb363bfe313b6edc5ec36ca16740d5b12acd","ssdeep":"","tlshash":"c72114b6707e92bba5d94d9457b01b31e2b5ba05384485ccbb3cc91918774c4a7e203d","size":1150,"data":"","first_seen":"2026-03-21T17:26:39.478099Z","last_seen":"2026-03-22T00:40:17.778154Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/BetslipButton-CNMBkbkj.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"249176655ccc714dff62a32ca7344125","sha1":"b2405b4b60d6bc4ac573b2f02a73ccf50fb95d6f","sha256":"55fbe0abfc99ec5c3486183b6cccac4ee249dce7d36664b5fc8cee69ecef62ea","sha512":"29545a89b954d8bd838e455af8c8ff502c6cdcee4283698ee957784188664cb775b081edf08664d5fe201a8db623035e744a105952a58a07402ea03407da783a","ssdeep":"","tlshash":"40e0f1468948c2fe07465dc121078502343269bcb340e5d280a92c527fb4689c45fa6f","size":418,"data":"","first_seen":"2026-03-21T17:26:39.706598Z","last_seen":"2026-03-22T00:40:17.78654Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/Odometer-DagrzJgf.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8a74ad83f4d1efb621438d7021c4628a","sha1":"120a50a42082236b3e09009ec567650ef3fd9347","sha256":"dc82bb79f276cb80002d3acf0030ab12ab8708a6c49ccd3a6efa43f016a699e9","sha512":"6b1f7dc97e1051af90eb7b72e4c5858e98aa819f42e7fa46c45cd42eafa7f088d6bd156a5880dbbe207de909d54a5dc2090721f104153898bb4029ae8c05525c","ssdeep":"192:J9d7KNJtQak5S0CGvDF2pXokmkvm6HjI7kauLPH7BNeSYpkYxSBrC7TlFa4PBD:sVQak59CGbM1mem6HjLPyFtUhkNPt","tlshash":"43621a897922723443a3b1e055bf4609773e5d6a3808405db67caedabe32c09d12bff5","size":15624,"data":"","first_seen":"2026-03-21T17:26:39.710671Z","last_seen":"2026-03-22T00:40:17.816907Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/InformativeWidget-DPp1w1VJ.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ac4a8b46bc7ec9221ede066013b02dd","sha1":"0e4dff7ab9f997e52c674c55d33eac8bab2a4c93","sha256":"2aa3b96dba14088b2890089781fbced38f7874ade1a0797b3d7aa6992b8e5827","sha512":"323c5f306e6c5ea9d47a2243d3cb77f379e0cf43ffb3ae53ce46493a3df5d01a1266a4b023ada516e1b93b4405f86c94e4fbfda17ebe5f7ef1c0222f6c53167b","ssdeep":"","tlshash":"c2114646f594d57db0394dc44257809169312de4df7dd4ed98617408983010776dbbec","size":1087,"data":"","first_seen":"2026-03-21T17:26:39.371175Z","last_seen":"2026-03-22T00:40:18.075938Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FastTrackTracking-Dwszikk4.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af41c045995fcfb27926ad6c22ae3283","sha1":"da167a71a31cd4d9b19e13d37095544f149ec6fd","sha256":"81450ecc7999e92453a3446ee6b61a01893fa5e85735a4ee749d9f9cf0c33bbb","sha512":"86af573598eefb92f27bf94d1c58424af046dd8ab98fc108284ccbecbb76bd74555dfeecb9148d10e40dcdfa1fbe53c6f0255669964d7a2d353fdb9bd08cee2c","ssdeep":"","tlshash":"c321750f90e443b47c804e8da3e7a261953d5871711ec4e1f0760bad3f0ca6583dac9b","size":1322,"data":"","first_seen":"2026-03-21T17:26:39.373556Z","last_seen":"2026-03-22T00:40:18.035421Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/DataspotTracking-iQyfe7l_.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1553761c57f3fe8977e11f9a5acbcb2","sha1":"0428d0e7de8fd59cd72a53c25c6d1646dbbbcd2d","sha256":"14ee5210761d6fceb87796096a7b97d4bf6dc77c671b081746ccd47d6b96c94b","sha512":"d31f722b3000e1fa4286ab76fd77cc4d84cce25893da33e8315bb220f0ba8103120a06a6577becd1654cf17895d99a128a4fd6fc3b4161f0a1ab8dd37dd4a805","ssdeep":"192:cEwDqXQcaXE/ucCOi1Kb0cHHnBxCHenNvuvXvqvxuhqVeDt8VZuS:TAqXQcaXE/QAxCHen5Q/0gh8k8juS","tlshash":"1bf1f455641e68bc7033c6ad0d5721a248387051e2329de076aacf5a9e3d9c28ff77cb","size":8166,"data":"","first_seen":"2026-03-21T17:26:39.500998Z","last_seen":"2026-03-22T00:40:17.814005Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/walletConnect-CiycSUBb.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","size":1998,"data":"","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-04-21T21:26:35.533835Z","times_seen":1601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6753aa0e762f5d5a1cfff0e6f900254","sha1":"72af5e3f11b16d2640621e6a659e09d651e06180","sha256":"a4ff4f1940d375315700c6178072c52dbff36bcff70768109750d703d1857224","sha512":"fe9f96d5b1bd12f777492fb52a2f24fe7b125bebaaa7caa7c4303f4f09afb245d058e7287c5b802f78b3b101ac4fe30502e17f5f08bdf2411ed1aa0f7656e421","ssdeep":"1536:ufCnu9Hy7ugIHeNFEZ1ECKnsJP/2K+hwlkWYcM2:SYMbHCst/28lkRcx","tlshash":"a373cf3bf28330eadffedf4056c5269d117ed15a226314cc16af14c60a68ea667a90dc","size":77650,"data":"","first_seen":"2026-03-21T17:26:39.77008Z","last_seen":"2026-03-21T17:26:39.77008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/___vite-browser-external_commonjs-proxy-BvjNEVMe.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0453c525f1f5a151cf277c20b691a2fa","sha1":"a708a4aacf7fd35cb4a8e0123fb8f1a61c37e8d2","sha256":"c59d3f5325da91eea5c987c2e77a946acf12669640c1d2de58a18d9704fb914f","sha512":"fbbe4db43256f047f5b6ee830b42799cad28672ed2b6966ae31f586386e67e4e13ff6c003dc1778ab408edd0f562e5dd3670a5a296cd7136061447180425afb6","ssdeep":"","tlshash":"dfc080491694dcb0525b1d828615d402d55c4d6e73f8f5d0bb088d51020158b62b8f9f","size":178,"data":"","first_seen":"2026-03-21T17:26:39.615425Z","last_seen":"2026-03-22T00:40:18.04969Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"be46b42db68a0c432250a9f01755df48","sha1":"aa379b154f95f538bd0b141a2720ce8173371f8c","sha256":"184d8e540ea4050c49a8c70209f1d2f86aba093550c9fa43ef3b6c69ccd47169","sha512":"03d7a04eae06ae0d14c0c69e1582926ae266c813473181f83c94cec21eeef5be731e416d95f1243fb95f6df63e184be9fc07c6bf606ae46f3a82cdb8cd7262af","ssdeep":"","tlshash":"a1700088ae083000002b3020cacb008880b2080000280008820080800e3000a0a02a08","size":22,"data":"","first_seen":"2026-03-11T06:58:45.741374Z","last_seen":"2026-03-25T06:58:25.104351Z","times_seen":1422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/StatisticsOnHoverContainer-cJKYZQf5.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5094d6cb1adb9cffe4cc19bbd41805d","sha1":"a966fcd915c9800719d4ee6d1db7c56ee305f79c","sha256":"c9483c1de5209a20f3506b47f0bf734708a6c375dd49629abb1e8c91f4f17b9a","sha512":"3ab0205957724986be26159446aa0be8166bce8507f971fd0352cd66da9cde2244516f2e9ceb1b48a13c3093426f72a036aae6297ad9fd6e08c4f55c19b6e38c","ssdeep":"192:Zzn2zkXAsarXDxLwxGEE0D9AOgzmcj/e0R:ZzBParTxLwxGEphAdzmcj2q","tlshash":"1e12736c118e5f6af41a8240b4202d35bb3a3877958d66f87ebc440fd3ce444bb9cb18","size":9780,"data":"","first_seen":"2026-03-21T17:26:39.498002Z","last_seen":"2026-03-22T00:40:18.104764Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/tr/","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25968e8050b03a228b4d547826b098c6","sha1":"b15ac3dce03be69ab8e198afebaf9cf761cf9da4","sha256":"583e20359cfc6a64154b601fc47309be1e57fc2b89434d8a7649445fc66af0fd","sha512":"d2256261787b021c3ef34b69e3509640f04abd03353b7dbea1d8f07211764770e8b0a4a1ea015475e3c326d1fc797d8191b87834550309076754f8b1213dcab0","ssdeep":"","tlshash":"89e0f1e77817486a749f01bd6bb5902431832119640dc922fcfdd4241f60693cc0e88c","size":435,"data":"","first_seen":"2025-12-24T22:39:16.413128Z","last_seen":"2026-04-21T21:26:35.841133Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-22T00:02:58.072339Z","times_seen":76937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/LiveChatInc-BwBeRgTB.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad95729555f741c465445ebf3651cf28","sha1":"35cd25bbac874733d0a3858af8b224eef62c8201","sha256":"50bdec45d97816d59745395248bc7435f2d1da33aa11b764e9f933c1f4d5c4ba","sha512":"79a4e2988c4d3515744af4888469b744d228f5affdaeb7716bce28e24fd9e26cbbfe20cb40095ddc128d26f953b50616470237d22bd98d2131830798ed737955","ssdeep":"","tlshash":"e95124dec43cb4b192ae67d1323f7b5f71165b1aa4048d31656c4f0af62a0cbc467aca","size":2920,"data":"","first_seen":"2026-03-21T17:26:39.425495Z","last_seen":"2026-03-22T00:40:18.011274Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/Firebase-diKvNL2_.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9c96b15207b33ce41c266eb191479bf","sha1":"f3a296de9fe8c5443c223461091bdc8a52c0b6c7","sha256":"a541d121f4449536a19127ae7c01559eba206cc71f0498a5a1038437a937ace1","sha512":"2ace56c3aaa190691316c2d9469f3a2b785d4b8de5cd20f39fd17e9da4275c2b33f4fd7fae089cc692004d9066d45af1f0e3aa0e3e4affe9a7c3314522077e35","ssdeep":"1536:s4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:ss1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"8e83957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","size":84095,"data":"","first_seen":"2026-03-21T17:26:39.602259Z","last_seen":"2026-03-22T00:40:17.843659Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/HorizontalNavigationListItem-C9W5wxFK.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ac06b8982ccf6ca471baa48a0c19c40f","sha1":"2beae61a21fd2d59f9f03a8795d2efb19aa6baa2","sha256":"9e4e946f9caf7daf8a634127530fc8588afa0ed9668f7c6bea709315c09f99d2","sha512":"5f0361d32bc8cc698b97e0c47b49f3de892c438447041a8eed5c71097b6e390f96a6759981c40b8f446f53ccd31c4af978881cd7a86261306a6034d18552fe67","ssdeep":"","tlshash":"a701c001e014db7c9a2b55c86b9e1089b1579afeef382cf1a0f4e11209344593646e8e","size":728,"data":"","first_seen":"2026-03-21T17:26:39.54095Z","last_seen":"2026-03-22T00:40:18.030844Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?render=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"383b0ea01b33567b53a79051a169e4c8","sha1":"48210a781c5b0e44fa32949a209cf7671c8daadb","sha256":"5790df718df4241261c16ddf7796fadf57d33a04c16a0a795138ba9f424b0b73","sha512":"c9e831055aef8857f5f3d2b54008d695982bd69160d9869123b19191cde633568b9b1e6ef6d1af915b65f35318594b1c10d8daf729b093dced8f4f263e88f622","ssdeep":"","tlshash":"7e113eb22a06b0350b7209e1e1ffcbb5e852741cf15c89d8a912cac42faecdbcd05685","size":1013,"data":"","first_seen":"2026-03-21T17:26:39.652855Z","last_seen":"2026-03-23T14:49:47.264151Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c74d97b01eae257e44aa9d5bade97baf","sha1":"1574bddb75c78a6fd2251d61e2993b5146201319","sha256":"b17ef6d19c7a5b1ee83b907c595526dcb1eb06db8227d650d5dda0a9f4ce8cd9","sha512":"7c73947fa1821233428dd9684e52ce908130a91b903d5179f731c9ded61f06cecca427a7a1a5aabefaa35be5a6dd84efc03f2cb779f339b0766481eabb241e0c","ssdeep":"","tlshash":"c71000000c000000000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-20T19:53:41.958138Z","times_seen":1985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/tr/","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3166d5139ebca4976a7df164026ff20d","sha1":"d7405b66cf00d1db4dc3140d6b1c63bca60fe4a0","sha256":"b297727d234af0837389b8bcaa1e72f4d0b62cfc126a4b9bb76201c5a52755ad","sha512":"ae0db71fd045eb0b103fd15902be9eb9a72763fc8494c7eec08ec13288bb0a46f320674f46a6467ba33f3869d3c388f15a83342bbf86aa38ef1810ed930d046c","ssdeep":"","tlshash":"4390024d71877261454126ed546a1016d3354480561c0113a7010081389814e42a5b8e","size":52,"data":"","first_seen":"2025-08-01T02:35:18.735752Z","last_seen":"2026-04-21T21:26:35.836785Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26d5c6e9eb5b8acc5d7f0a4acb0bb17d","sha1":"f28c859ece3ceabce922bbdf6272f9f7e826b783","sha256":"8ee1aaf2ad1cbca21e0581993206ba9ffd736c611beffb7287581a87cab67ff3","sha512":"388bd8e7a24945d1a3db30cd4cc03f006d5222f5b399b6578eaf9f87707fefae25b423aa0657dffd191f980827742165f1cfe7577a899ac63ed728bdd9886ee0","ssdeep":"768:IAObYQP9MBTSbyDRP0aubWc+ZdLyiQL96+hYs17eFCgt/oJBpntD/PN/xd0MpIJ4:TQP9MqMZ+vCBF/g0vmBuNfftrcuk","tlshash":"8fb371c8f6d6f064439764b4803f510bf23eb96e680e8464f266dad26c7899d9133f78","size":108916,"data":"","first_seen":"2026-02-24T14:23:50.976435Z","last_seen":"2026-04-21T21:26:35.819592Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/tr-vKvB_tcp.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"029e4708c52bb4fc1e7f00b3414d9537","sha1":"bb8e29f589a2f69f1a05f0388800ab447040e565","sha256":"07583a599196f96701dbae948953a539fe0b88fd9392d57e2dfa3466663d01ae","sha512":"4df8c5c71ab5f560a88a315c5b0983c2f6b968a7d32a6c0cfa9491c1a9e26496882296b475411c288734d01b03c8e7c70bf9a0ad11976bfefd11b20fb30fe3f3","ssdeep":"","tlshash":"1f31a44c2906eab28b016887882f5f04f81c2b087136f1719ba0c861ba709ed807eb3d","size":1459,"data":"","first_seen":"2026-03-21T17:26:39.379575Z","last_seen":"2026-03-22T00:40:18.189259Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4aa69d45c4b43f0b31fd971b1bbdd","sha1":"77122463966366aaa969b55f404af7903b9d8f86","sha256":"34b9a3ffbb7a87b04fe51abdb665588b82d1e5fba4cad27b6d6518228d20c2b5","sha512":"6bc666c4e89838ba9d62ccba15b642154cb69eb86ac22585e64e11eb0bca2ebc710c3c5cf8993a99aa85035e1ae44d566601f6b7649e7d92fa3d72a2f53f252f","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFY7dZPkx3u4V5pfYMrlSf:4nmuTilGhmPx3u4V5pPrlSf","tlshash":"36a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":106023,"data":"","first_seen":"2026-02-19T03:13:10.618029Z","last_seen":"2026-04-15T01:21:42.737131Z","times_seen":8426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/936.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/936.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1574\r\nserver: cloudflare\r\nlast-modified: Thu, 03 May 2018 07:16:27 GMT\r\netag: \"4aa97a6aee2d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 11:27:43 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 194277\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=RA2tER_lwVDipHW8WmR1LCjc5jIjn6ZWmZrrbIqGgXs-1774113941.605047-1.0.1.1-KbHMWr0Hk6Rl.cc9PWAH3OkSrN6yOMtZ4JN3J0hEuqzxbcBw07o5_BQiakOJuZ.3SR6pQoOs.AcNsxve4tM1NpPfId0af8HTgx6NXW7sJHxXLxS6.fvYgZZyrq9xnYs.; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBA4s6BaZRlRJQi0DHl%2BvRbLbe634qFH8HdFjJVg0T3SpsAxqXSlJXLFDMdzsGa9G8QoBGt3Wqb%2Fc7G6xpl7mcNvOlqVvQ8HTquOjQX2wYncqc75A72TUTGNFpU%3D\"}]}\r\ncf-ray: 9dfea84708285a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"25794bfd577bb25b9e2ac630193a72b9","sha1":"01c929b4e5bbec3e8d6b91477429fb061154e54f","sha256":"30c11a2571db28011aeb0baf2af3e4136937906fc083ca4a6e35351de7bf3582","sha512":"6ae396f181e145e9af049c0c2189027f0577da3258afc3ea7a253bc4712f130bf9c5cbc882af3af969c781aa6f4a492478f55ed73082cd99e47af8948042208d","ssdeep":"","tlshash":"86310aa3102e502e3c57522611e684965e503afe14b1b8447a694098b783edfc2a0ddf","first_seen":"2024-01-24T01:47:45Z","last_seen":"2026-04-13T17:44:31.606896Z","times_seen":196,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/3/7445.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/3/7445.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1491\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Jun 2018 10:44:11 GMT\r\netag: \"b0f78ba45efad31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 19:10:45 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 166495\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=l2Es5ryz.AZXMQThTuy1eckOF64jJuewucsxt9gsQ1U-1774113941.6054606-1.0.1.1-FUccK_CyhlB16.iidvQsU8QFiSupqHritCarq1IJuVrnA0Oa.ULBhcz73QrNrfEg2_EeX9TRPJSijmEdO22BrIvrr8aIwy2SQlPIsLFN5_QVdHdMHO1UZzCUYj10fwNu; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fut4ZVNIFCH56uewQlvBtna6LPL%2BVYOZI7DIr0ZEOerXvlPHnv2Ak9UaiU6Qfu82JnljjE1BLPyMnzyXQ7Pw1%2F9P%2Fe8Rbr35aNf9YAF1MYwbOZ3omrG%2B5bLHJes%3D\"}]}\r\ncf-ray: 9dfea847083f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b957473b2701372e7d9381f1443ea30b","sha1":"fe281feb12eb7787b697e466bdc238a60b14247a","sha256":"ebc3b5e46622e6d97449261d7f0f5444fe8ecb60285b79896dcc0b40d1a43db7","sha512":"db6c72aef937a1a318f24de09c483f73606db6fd8d2b002ac7ec02c950906b5b66f36456f6716c69010932b5cfab3fbb7c5a272957c21c9b3f5d989217cb9f27","ssdeep":"","tlshash":"3231dad67b6e86eaa7c4162609c41620c17bc493c1217d41aed0c44c03f990a1bb46b3","first_seen":"2025-08-22T01:08:50.810498Z","last_seen":"2026-04-21T21:26:35.612466Z","times_seen":26,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/cdn-cgi/rum?","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 637\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iqIaqCvhd3WOhabAG6OznVGGmc5KHMlga%2FAMYl5MHQOdWMnu0vP%2BKWVc8YdHHWp0DmsF9xGScwtj%2BxPO7GOmJYpVj0EcPzTZNAf3duLQ2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9dfea818ed159cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-04-21T23:59:12.088348Z","times_seen":14127,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/walletConnect-CiycSUBb.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:37.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/WagmiConf-B0zYIpvp.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-7ce\"\r\nage: 180\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=SoD1i3ngw5a7FME7CDNYvsTkjvbDgslHJU8oJmy09SI-1774113938.0866394-1.0.1.1-SPoBIW4aqYJIFtvBCi7j194b5D8m3xRHTaIJrQrhIao8OI.CAjbMyI9vK3VcSig73jZV7fc1e3WNwQMVS3vK3cdOpHtGLpTpGXrXHdJPwtJCXRpYyfA8zyAIB7bGjci5; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XalMoX6Ysg3Xxbev57tdnpSWDy1sAo8yy4D2EYv0WBmzS0b38vuaik4z1EpEoH6rGuMiLkM3j2KdiG8Zx%2B7TR30H%2BLq1d34tP4ZRvppzI5e4WmM%3D\"}]}\r\ncf-ray: 9dfea82f98b89cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-04-21T21:26:35.533835Z","times_seen":1601,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mnfYIGyEZEroAJkxgs8TRfnUtzZQi2OYzc%2F9u79O0XTM6Rf%2FWGr7OyFHdHdL4I6fs0%2FapRN%2B316kCnj8dHVdVgsnKbHUXrlUsxxt5pGMFUTJ1OyG78M%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dfea839ab4cc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2821,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ed84599d293d187c97aa6f88754332ce","sha1":"f950f5294b5fa13bd1c3950e5cb28b1a2ee241fc","sha256":"599500c94c302ac02594dd87a6652eb51a9f45042f0fc5fc2bd2f3935f8fab81","sha512":"d94fbe4938b707b2595582d942cfd27ada4874b5be459851f77dc5371f705af81eada3ddc170697813c2657a8404f1303b8777279f716eef4ebe08fdce284cd7","ssdeep":"","tlshash":"71514f3646b21421436710683babf31ab23ad2433689e9447edd93005f85f68d9b3bde","first_seen":"2026-02-24T14:23:51.260409Z","last_seen":"2026-04-21T21:26:35.779688Z","times_seen":34,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":259,"dns":234,"connect":8,"send":0,"wait":55,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/games.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/games.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=QLtkyikTLTiqJ6x3i.rdgZbNUYR4T2c6kqj2l79PH1c-1774113939.6676028-1.0.1.1-yM9bwj3bMYRpeRQqCDEhvj.twLtaHBnarjZd_fiCKJT8qMRr8hgeE2NPDb0eyNEkNJ26aYetaLNci9vPkuUyphxj7wVVke.jp1SkOvjjrkeBqrXA.sNvFePABjtLTk2h; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1t3pOOrBTK6csSX9Wemshe9nxrHusi2MiVoM6tucAMBoo1b%2BhJNeL0wJ7hdM8sTOpgT8U%2BbXpVOEhFKe6uorSJDkHjjc8NO6d56UKc78v7TV5icYjg%3D%3D\"}]}\r\netag: W/\"6862707f-525\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838e89e11c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1124c704ce353b78a51dd2190edbf761","sha1":"969751af8092f4dfa4450def11dc616eff99a8e4","sha256":"02b58d0aaacddd78f61fcc4a92e72d8526294443ec8e695fe41a763a24d873b7","sha512":"62371f1a27dc5a9f43dc9d738c81641e16ad577f02a50973cd1515f41053160ac5286128dc60ba13ce57271eb462d1f258f830125048ecaad0944f9f5153e39c","ssdeep":"","tlshash":"fe21e14c573150fcfd4fb3e9a32e6b787449f2156823c878c05e45cc268aa4b64dc861","first_seen":"2025-08-01T03:40:47.562391Z","last_seen":"2026-04-21T21:26:35.731212Z","times_seen":1018,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_81708316ae460e2d7c097fe8bfca6077.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_81708316ae460e2d7c097fe8bfca6077.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39974\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 14:02:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694014fb-9c26\"\r\nexpires: Sat, 28 Mar 2026 14:43:42 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 9719\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=M_CTGpLr2F3yZG49t04HwX_oBDMBJCVwsZKLAeRwsNk-1774113941.61094-1.0.1.1-sNZRbONniaQc5EI3O4ErEaW1lWm1Yr_rGy4TvY9n2NCbA.XDRK7DQr6QQA0NIKhTc3TW4szVdbMx9KRqcfcUmzIBit0zv2WfZpJ0Z1llGtlQPtlJlSHNLeXknNsWiAbw; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRrK%2Bva9idBJ0Eb09ZSCT5EW81aQwpTvHGU4iFcjO8VcowU6RPws9wvc0wU%2FJ4PsKxh96ts%2FYBrF3%2BoFAIDc4Q9aDNKIboodvIBmOxEam76s9WjkBw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8451d419cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86013b42eae428e11372f049516b7ff9","sha1":"225a913e812a35bbd292b3316c359967757f3801","sha256":"e55c587494457c03fdc8be31a70077cbab07905855cdf253454ab76b7b069271","sha512":"524cd729a736a3cea55239e8a2cc8d1434bda345dc35a6e663552ba59db3be7adb4419ed21cfda32a1468a0dd735e910482186438c6cc119f70064e1d854771b","ssdeep":"768:IEmoxuaqs5NSF/H1M1photHZYN+MeKRlSGifuJvy2UbLWIKp8mkx+:xdxuUgFm1pmHOsMHlSms2P8mkx+","tlshash":"790302a130ad0760f79a56ebb11d8d3a91167fc149be3c782c780c5cf379fe64658650","first_seen":"2025-12-24T22:39:16.381848Z","last_seen":"2026-04-21T21:26:35.536972Z","times_seen":40,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/LiveCasino1.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/LiveCasino1.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:11:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=_5K9xArdItMcsJ_NggQEJzpvTOzrotIvFwOUF1baIUk-1774113939.6970959-1.0.1.1-vejhYjjP7XfkUWzs_QhFpyK8VMnQW4BGGhjaKe06RX1xFV9HAuyUa.h7TZb7ulooGVA51yR1moJruJPTQ4tSwrSiuP7qwoCI6AKLtHDx64wUkMeQrIBFUmnI1dT8CNqm; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YgwRkioam9S%2B1aZYj69DNu79pBaMnpG2y%2Fjd3GUX%2BACKE%2BMFHxgJf4UDJed%2BmxL57eaLy76Oi23WjvyOhtp2VJJzRgDFH6u7KOmXE%2F3zWuaWc4x%2BAg%3D%3D\"}]}\r\netag: W/\"686270eb-5d7\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838f90111c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ab76ddacc7177297110531bdc4b7b09c","sha1":"9e3a3721140685f8b095694cf6690ebaeac63278","sha256":"67de7a9984a8f57a460e025368985daf653eab425caaa5482cc1f3af17c43104","sha512":"16ce040d64e0b45e159c5a0bc2ee0ddbcffdf3405d0ae5dd70b5d1297f657f9067b8cb03a1e30811720c804e7997d3c57815e9b3db2ace852941fb2a7900ea13","ssdeep":"","tlshash":"ce316de876b0ed7c5c9d3a9ea7195d542c9ede6921007ba5db0c8c90c3cb4089759c8b","first_seen":"2025-08-01T03:40:47.847838Z","last_seen":"2026-04-21T21:26:35.733429Z","times_seen":972,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":111,"dns":40,"connect":17,"send":0,"wait":505,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FavoriteGamesButton-CYfYTrLX.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-CYfYTrLX.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:09 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1ab\"\r\nage: 2670\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Ljq5C.ptityzQxaQgc9wpI6r40K4X.6Lr5489aDnaJE-1774113939.8114812-1.0.1.1-sirSXmDcULi7qio_g73J.DxcW023x4g01Y9Pyn8HR6RfbOrmou_HZCOoeOf58k_k7KpAZA9L27VNg3eIp.VzDgxurp6GeK6iaDA5EnpLBsDegc3GZqePABMANNcGHjGv; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TtRb3konKA26s2CotGyiPV7y8nWpFB22%2BW6lN8vjsnXITD0MZI7VFx3r8qwmf1Z9ArRhKlIBSOCmmJK5590B3qvL3yPrwXURMTM50eAAmyXpfks%3D\"}]}\r\ncf-ray: 9dfea838ea539cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":427,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"4a565c8afa2e2ec3fb7c9744f2b8c63a","sha1":"41e7243f94d4d2ec8d2f5f0c53ec8478d6bf07f3","sha256":"9097c3310dd046a510dd2fdc578c8d96061c1b1c8cfd91725c61b39b36574553","sha512":"52e6ec9255825251f43fec7a6e3dce10e459c123e1449d847e14f3b4e386293dbfefc4d5e586497b58e2a205d36e2a590b29af027ae89fb33fcf4e89788d5847","ssdeep":"","tlshash":"02e0fa0bd059d1fa2b436fd01107c8243436b47cf79cd090408918503d70597c54ed6f","first_seen":"2026-03-21T17:26:39.361872Z","last_seen":"2026-03-22T00:40:18.081875Z","times_seen":4,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/Tooltip-BFFrse_o.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/Tooltip-BFFrse_o.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:20 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-334\"\r\nage: 2659\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=qV3pq5ePLPV4pUcHYVFZ_lIss59fSVTyCrQV6O7v5Aw-1774113939.9294255-1.0.1.1-qLpzcAididlhdVIWEk3PZ44x0xtvNd1iCWSMTcOLCIoJJc8skr3r2Wh2Ja.jmpJ1D2bWNJCE..LV72g4b5dtnTmCvu1UYDwPhXRhAJTz3IpASni_dI37pkZETkFDeATg; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYYJl1hRli%2B8q%2BH1KkEMDdkP8dLVndZ42hhyPseBftmnDtCLZndHSMzzjieKJuuNG1Rx%2BOjG1RG5UjytsSiEcxfJQZPyi9NHdlhBnrblNO0a83c%3D\"}]}\r\ncf-ray: 9dfea83b0aef9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":820,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (819)","md5":"5dbd6b1605963511da70c190fb431076","sha1":"32b83b773ff51e26a8bd8f6aeff9240609693883","sha256":"f8a2abd269bc866e1a5ae41159e53934a8d94ba6f6f8492eed8485e7e3d4ea31","sha512":"d09ba6a204efe8e82fd72310385d53c4c6fc14515407c0ba66c041ddc19ba91768fa100d5ad439a6362d8a263c8610e9a5bf86cdf8310dc55ddd146b64c2b9ea","ssdeep":"","tlshash":"0f01c246e032fbf4a17654da142e856d7153266c7e2f58f16038058e0ae4984d317b8a","first_seen":"2026-03-21T17:26:39.364122Z","last_seen":"2026-03-22T00:40:17.826468Z","times_seen":4,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index.B9WK4fdv.css","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:32.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index.B9WK4fdv.css HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:32 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=hx4nhNP7OvIWX5M.4xb8k8hXedYJw.CC5JMbvfSWUPs-1774113932.324242-1.0.1.1-PDKMQPdzyf5wEGM7BAENY3Pu0OSHiv4ejbZaFBKycEoz0QqfzFHycDdlQA4Y8oDrgRHxRAgBiJDBpsM5nAug9zgQ4h4z8AC.XqK766TJ_dUDmT4bZuBEzBlfJr_jLnPt; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:32 GMT\r\nexpires: Sat, 21 Mar 2026 17:37:15 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJM5FLgw4P1Fa9j5w%2FMQ2c3dDZT7ejIwxrc4%2FajoWTnr5cGWqsBNspZREuEzVMKBehN4ksu76oT0H3w8skzyGaHme9rZ7KUNFmO1NSOMxuOoqkg%3D\"}]}\r\nage: 2897\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-7d760\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea80b0a4e9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":513888,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (33571), with NEL line terminators","md5":"82df869b684d332c3c71bd22d1524e1a","sha1":"8c3b8066aeac034e570c3db1a65ae60c3c4e7e1b","sha256":"aca6bdced39365ae8f55fa684596ed5d64db9f42a0d5d2ffc9b6624b840923d0","sha512":"60f495549a1efebb8e37f4050859473b45c574bd9b28eae804760884a8c1239113568e6d7a7cb029f376e1f0b36ad09db97b78711b97054ce74d2ea76f97596d","ssdeep":"3072:NT4qmIcM9b33YIZpbLjGkUVDseBrJSaQFr:NUqmIcM9bHYXkcnRs","tlshash":"e2b4d9a2968822f87b33d61f93c5b39cb014e061d9621e6ff19a612dc6d77900263f7d","first_seen":"2026-03-21T17:26:39.365648Z","last_seen":"2026-03-21T17:26:39.365648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":518,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/conf.json?v=1774113900000","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /conf.json?v=1774113900000 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-2e4a\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=oz3F7czJpu3aj15ah2FJgvCjiXMMtrVRZmkCtZcL0PQ-1774113934.3938596-1.0.1.1-I8lXOK60V6FV9S4HZLKJg6E8AFqI1E6OpRD6gIGe26ywaK9w3gitArMBN.F6TLp7qcHnSORhPealTvAB2oLe323Ns4v_M3P9qxMwf1XF0TAfFuBXWGNPquw8JlGkUkXt; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lh67kDbd7xPkBrOLdnP4IU4lwwX5KQ0cL%2BhPDJ1UwKOa6%2BKfahxERs848KMCwt4k8uBYmMfJSaZCT1moYC99WnJCOvHjb540KjuUAHSsCMBCSLE%3D\"}]}\r\ncf-ray: 9dfea8186cde9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11850,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ed91bed7ab43761496225be6b8c5df18","sha1":"e54d100517e9754814485eb020c5edaaac262c7c","sha256":"3c5e4ce335d110636bf15d33a1fa2cf28fb5aa19b22d87ee9ba44c41925b812c","sha512":"94a0c6e5f5abbeea47c3326a5140c728250deb7406a899c267d6e025a8c55958df8bc3ff57aff8fcefa6067346cacc923ca72d09d6d1b0b7b0b2111a9bdf5977","ssdeep":"192:NT9qoAsco7sco9vB9sW8Dx69AXWAoIVIa10dc5ZNdNH5SCb+eruUFDhGtC5L:NTAoHC9J9L81AAXWAXKdc5ZNdNH5Sk+S","tlshash":"e332b66363549ebe87c983c8b1cb7f0bd4bf186be9c5f495c94cce294179a590213a0b","first_seen":"2026-03-21T17:26:39.366912Z","last_seen":"2026-03-22T00:40:18.167173Z","times_seen":4,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea8189f090731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-22T00:02:58.110738Z","times_seen":76896,"resource_available":true,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:35 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea81d2e561a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-04-22T00:15:18.982921Z","times_seen":12947,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/Promotion2.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/Promotion2.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:14:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=R2zx.2g3DzUJXus46YSGD.ksC7M6wgNfXnNBsYEIPvg-1774113939.647522-1.0.1.1-wUUf5mDcI0EfE7pcmYnU49v.OyiLpRL3tJ5LlGGo8PYNaVOKEpNscpv8AGJA0kDiAJkiOuhbJ1VU8NkkwELgkwAkgbxOCdghMmZJ5OIJt9aI6wH3NjXcR3N0OhcIc.Pu; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTylt8w6WFiZjfz8FX1RsC0pOF1%2FfNE9%2FDl9Px4r%2BpUqVIadj6M9xmpTBEFU2pYWfbgucUgKxEGotc%2BYIXcuUFdjuEEh11vjghqv60Gw5YbuosA0NA%3D%3D\"}]}\r\netag: W/\"68627184-382\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838c86111c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"31cbecb2c7e793078b4a8e43100c2e33","sha1":"e073b0e09fcd4244f6c86b8f22206a46c4af9f3c","sha256":"a7ec0feda0f0f44aecb09628876438cf31a3d33de7393d25fc1b39d6251bf104","sha512":"6762313ddd6985ca71ea5e90b3a05664d0d1a3cebfafa6da07ebff76f62a3c9634d17ac226a4fabdc606ddc5c7c7adbb4628f3e0c8a30d5e5f96e574266d2242","ssdeep":"","tlshash":"7a11cce88739e7b438cd1f4f9a3d4dcf3614261a683de034e73eb9c4a61391c652119a","first_seen":"2025-07-08T23:44:04.701479Z","last_seen":"2026-04-21T21:26:35.70514Z","times_seen":136,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":88,"dns":29,"connect":8,"send":0,"wait":491,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/Predictor.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/Predictor.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=xP4dJmwgYs4rj4hW2luks4FaEA6ehByrKq_acpqw6Ec-1774113939.6759317-1.0.1.1-MMFjSzTCikBcQOWX.TezwSdaTav70dvQJOmMwupdmupkuAhENdK.dKbs9TGyIjacfuuLf8KcsQuhJOuzw8WP256CLJpzbCQbdtoySSm52H80Fm6WnzBHEdJJ.zQoV2Ye; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zB61a8sYeK1zbIH872zogyXWe7FDHIdmwBpSrWGTcvku5k0aZqMT1VF4GPftTn1s%2FwNMXwA%2FjGUSX381xbDOo5W8R2cgdLxRTbpqgMxXptn1vApw3Q%3D%3D\"}]}\r\netag: W/\"6862709c-2ce1\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838c87c11c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11489,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9b3949596034c0e170589b0d298d8d80","sha1":"3ef85a6cf846b4e3c0453652cd192a92db48165c","sha256":"14ae74f8558911ae15ae063621fa5b3f92699ca40af8034feaf7da18e1c5b5f8","sha512":"cadc1b604d9bbb9116a00b9cae1c19156c46103627ff76f5040c8f249ed6f0215f662f45a25d9fa1654671e8c6cfa4b258cc01d7f165f4a6d1c443671b91f68b","ssdeep":"192:IDzUUkrlb5YU/aMstNifMcLwW/ykO8piJesLUoyua7aASt5KsM50FgJGPbdGl+Jv:Ehk5b5LCNi1LJ6gsM5KgEPJGl0v","tlshash":"d2322fe7cb30c0e038de25bede2a5ed93a1ab4bd5ab1d044536dbc09d6c3dcad628540","first_seen":"2025-08-06T06:15:59.472831Z","last_seen":"2026-04-21T21:26:35.669827Z","times_seen":77,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/InformativeWidget-DPp1w1VJ.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/InformativeWidget-DPp1w1VJ.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:18 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-43f\"\r\nage: 2661\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=V1QqlvMOcuKnXzWTThYlIbSIDZoye7rcT35z4aR1bsA-1774113940.0534866-1.0.1.1-QSreY6H026TMJ0L6JBPpjeyjmNg7bGi3ByeadqeWhiXTxnf9bHEGTste44Zm1PTobVlgUJjXEM_6Bbz991qwXjpHqn8UJP8mQlIONErHLE78K1yPm_tU.1vsXBbUYP9B; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XR1npOBpZ%2FRtP3cTnuz7TBHK5s4XnXlA3Z2FdQgd7V3g3VG9UAdZKtiTM7ygcPYofcHWEzkpwjXXKn0DVpEEPvB33NSgUvj0U4uvF5WLDso0pH8%3D\"}]}\r\ncf-ray: 9dfea83abad69cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1087,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1086)","md5":"0ac4a8b46bc7ec9221ede066013b02dd","sha1":"0e4dff7ab9f997e52c674c55d33eac8bab2a4c93","sha256":"2aa3b96dba14088b2890089781fbced38f7874ade1a0797b3d7aa6992b8e5827","sha512":"323c5f306e6c5ea9d47a2243d3cb77f379e0cf43ffb3ae53ce46493a3df5d01a1266a4b023ada516e1b93b4405f86c94e4fbfda17ebe5f7ef1c0222f6c53167b","ssdeep":"","tlshash":"c2114646f594d57db0394dc44257809169312de4df7dd4ed98617408983010776dbbec","first_seen":"2026-03-21T17:26:39.371175Z","last_seen":"2026-03-22T00:40:18.075938Z","times_seen":4,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/fonts/default/Roboto.woff2?v=159","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:33.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=159 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-faf8\"\r\nexpires: Sat, 21 Mar 2026 18:05:49 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 1184\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=mHhwrwv.L93XQ3XKMd4bPrtf8kEUM1r3PF2gsHNygaI-1774113933.3628626-1.0.1.1-oFZVgFTUtKmn0Xpy94n.dU5yXb3MjvGGRwCEFaAcqpRIdQIYEr2MtKJpAPxJ5h__Ek0tziRsCSLb2sjbC9UKjVnOFILV5OpAWCDKQcrgWe8OS3fCfY6lEdN2u2qEtAF9; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5S8dFZ0ADhfyJINUVRTIGD0iU2TaZ8M1giz4Z3OABUM4AI6SM8D8y23ha1KFLIPet%2FTBrVVQEoB1HOd4l04hjSLVQHn7Lbv%2FDV%2FbOe3Mi473AZc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea811bb9c9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-04-19T18:34:31.433936Z","times_seen":2689,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":462,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FastTrackTracking-Dwszikk4.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/FastTrackTracking-Dwszikk4.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:12 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-52a\"\r\nage: 2667\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=03XDIR6xh.tgEeGxDx3vDqIM_sVcLGvReI_vCcH659c-1774113940.0349538-1.0.1.1-ZWYyJRTjhWqy6i5JZY0RyhDqusgDH52CE8gnctdESbMBWXNJ6n2Avan0aR9SOFiU63r50fQ.C4F2itWhfEcbRTjoUi.fmFPbk89hLszZfBL1__gOnJfACCNw0WElcUMY; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UBOseStr2CRkZ5GXN4wJgO%2BgwwatePcIDSOeiFjn5Nk%2F%2BT4G8423ZiowDFxXs96PRcdRdGVBGAXdts%2BBjnshQCxCFzfEXQHUCWKpuvc1YmwIiLs%3D\"}]}\r\ncf-ray: 9dfea838fa589cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1321)","md5":"af41c045995fcfb27926ad6c22ae3283","sha1":"da167a71a31cd4d9b19e13d37095544f149ec6fd","sha256":"81450ecc7999e92453a3446ee6b61a01893fa5e85735a4ee749d9f9cf0c33bbb","sha512":"86af573598eefb92f27bf94d1c58424af046dd8ab98fc108284ccbecbb76bd74555dfeecb9148d10e40dcdfa1fbe53c6f0255669964d7a2d353fdb9bd08cee2c","ssdeep":"","tlshash":"c321750f90e443b47c804e8da3e7a261953d5871711ec4e1f0760bad3f0ca6583dac9b","first_seen":"2026-03-21T17:26:39.373556Z","last_seen":"2026-03-22T00:40:18.035421Z","times_seen":4,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index.6hr6LgI6.css","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index.6hr6LgI6.css HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/tr/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=Y4xK4FxzE3EG1fxsU.7fz1ARs9dwL1fyv6xJdoyc_pA-1774113940.8001535-1.0.1.1-K0Q8fYcMgolemhI5BXmRSIy4oXWMEDE.6Jgs5TQXMAgmp19_G7nHlgzT_z4iIOoNFIttXbZd3jUl2fDO4tBYtVVRpLk3nr.YhV6yyCRnlOxRGeDIE9FkOvwDaPrRwJ00; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nexpires: Sat, 21 Mar 2026 17:41:11 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2FJ95rbCzSYPzOzkWUWtJiNk8kVslTmss04rv%2Bb47kE8tsjvc3Hj50SZ0I%2BLxH1ElHmv%2FP5yD%2B8aHNJxVKrAJIYsyNFYaJXofbr7mGg%2B6EtEOp8%3D\"}]}\r\nage: 2668\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-4e4\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8409c0c9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1251)","md5":"d03ad7d634db584e4aed770123954f9b","sha1":"eacfeacdafdf8738f325cba4cd9352bad2829a4d","sha256":"7dc01c1d9e89862143b3c4cc81a2255e63cdb8412bf7421061819919fc2c6bf5","sha512":"e4641ddc5f100aec535f0f87f4b4cf617ff4fe450de4ed993b3681bec62023646689f9f12edc7b03c4dbf21e0b98081e4e8dd5b0b0a13970fd25946f953bde37","ssdeep":"","tlshash":"f0218ad7190b14feba73a6bf454346ebe5238c5bce63114ab6c21729c4827a2422245c","first_seen":"2025-10-29T09:08:38.623149Z","last_seen":"2026-04-21T21:26:35.807425Z","times_seen":974,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-5iQrWYQ_.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index-5iQrWYQ_.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:26 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-b6b\"\r\nage: 2654\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=E38a77HOcdbUdUG6U8UfllL01ySQ731Zz4OyrOiWlxU-1774113941.2682898-1.0.1.1-LNP9QyRyDSn9kf5NCNMW2q7h84JFoMjdBFP209l35F35UpGNHwAclRIk0pxfHAGr5iehmy2qnW1aQr.N0O2lU4c8EZZ6lhbNIXRwjixbeoE6m7.H9Em2p2BarbdPhn8N; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vr7FpO7HDMZDa%2F3tljAdpC4LoGCkIzWjnm9jYUwdJsyO%2FDujkv8mVubqc%2Bq9fRQQNCtZI7FgRGZHs%2BVMGcaRrL4z81OzIwpTvsdr7ENZifkNaik%3D\"}]}\r\ncf-ray: 9dfea8439cdc9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2923,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (2922)","md5":"31e010232dd36469670cc2df8c881344","sha1":"029d5bedaa5607a234dfaeca2c6714d403d0f283","sha256":"d880db5966832fe6c39364ab8dfefe271f514cf8e5bf8aa1b86d5875c2c591b8","sha512":"6ce98fd2a8be27394661bea778cf317e1d971c3394c71ee899cb6fe0cfc4e85cce60a1cb676d3b7ae3161e368437ba252c603b73dfa3ec77e31a9cfa7dc1c3a0","ssdeep":"","tlshash":"3c5121c76042e7f4afe748a6429b10b074374d5cbe1f84a082be58964998792e35bf8d","first_seen":"2026-03-21T17:26:39.375997Z","last_seen":"2026-03-22T00:40:17.988097Z","times_seen":4,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_1e0032d5ab6bc47ae0ff53da48c1e21a.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_1e0032d5ab6bc47ae0ff53da48c1e21a.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18886\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 01 Oct 2024 12:45:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66fbeeee-49c6\"\r\nexpires: Sat, 28 Mar 2026 14:35:58 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 10183\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=d7Vug1QocRTxJaXhffAaP7CK6MRl1mVA2aDGRluyl9Y-1774113941.5241473-1.0.1.1-uURVqT5huucIs62fAV4FMGp6O42UIdICWexZAVGH8WzQ0fimRd2qz2opChAwxkscxX70sLuQLHS4LxqLaMmgsankchfGrjxohFjZPiG4K.hsd64H.lA4Ks5Mv2JEz6lT; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWSnhxgp2nn3HbK6duTbfIHQ8JhiQjJpA5V582AVRdXfCyDiBaibbRUg1hLJkKFy4eef0DMxQlir%2F9qqjsAvlvVM%2BbIJQBaGIp3Ea6wo30rOuz4M0A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8451d489cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa5bb675b18fb9ff6ebcefc6c52b2b80","sha1":"aef0af185eab795ed1e66b6fd386bb2bbdf99a51","sha256":"9e57aa30fe310aacb3a5660d08ad36e93609014c63ab91e2674217cc81ebc5b5","sha512":"bda4926c3f51a68f3466aad782bb0e212b59ebc698591699ce3927038ba8a8dfbd52ae66535da875700c6ef2cbbdabb67fdab3a92629c17cf2bdd2d909459623","ssdeep":"384:uTMJDMzfI4dhbysbrfdO/1rYKo5nvpEg8SA21BvLQzOSMGz:XJozfI4/ysbr1O/1AvlD1LQKMz","tlshash":"4082e1099a7934e9329308fe1b21614d31f03ab66c405758db7ccbe410c1d956b6faf5","first_seen":"2025-12-24T22:39:16.22703Z","last_seen":"2026-04-21T21:26:35.720723Z","times_seen":34,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b057293b718ae7060a9acc593ff83f67\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea8189f170731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-04-21T03:41:36.073067Z","times_seen":12668,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/tr-vKvB_tcp.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:35.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/tr-vKvB_tcp.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=1774113935578; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:36 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-5b3\"\r\nage: 179\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=P3ZFgxW.MKbI.ym8kJAeMlX9TNRf5uoullV2ZqbrLrs-1774113936.3336263-1.0.1.1-eDYDoORUzlYrd37gApl7CQ6CdzOfO57CjQ_Oow1UNNlD8ir0Q.1Sb8CeF29k.w7E_XIIYBOgRvKg2_7Oy78wqYhqpnd7hFPZvc8d3h3ixmTleSCFqaTzjScLhDo94g2B; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b3z97Fyi0MU%2Bv3SPqdlFMxQ8xqKzC6UBo6hOk3qQSfz1tK4mu%2B0jkAxDfQMcrWyhaZyroqy1h8%2Fb9c9klEzHC46VMtwiTfwck9P3%2Ff5Rp%2FDkwnI%3D\"}]}\r\ncf-ray: 9dfea8225eae9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438)","md5":"029e4708c52bb4fc1e7f00b3414d9537","sha1":"bb8e29f589a2f69f1a05f0388800ab447040e565","sha256":"07583a599196f96701dbae948953a539fe0b88fd9392d57e2dfa3466663d01ae","sha512":"4df8c5c71ab5f560a88a315c5b0983c2f6b968a7d32a6c0cfa9491c1a9e26496882296b475411c288734d01b03c8e7c70bf9a0ad11976bfefd11b20fb30fe3f3","ssdeep":"","tlshash":"1f31a44c2906eab28b016887882f5f04f81c2b087136f1719ba0c861ba709ed807eb3d","first_seen":"2026-03-21T17:26:39.379575Z","last_seen":"2026-03-22T00:40:18.189259Z","times_seen":4,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/CasinoJackpot.C7UxSYfT.css","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/CasinoJackpot.C7UxSYfT.css HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/tr/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=FkfZK2FGYUvB1WVR.rMafKpV6MAMmXac.inG.NFWBAQ-1774113939.9445815-1.0.1.1-Y6Pudt.FWPK0Hu.MCRqJztc6w42Rjv6DwTaUjYnJ7DHTGIOiYOPeXjh6kfA2JxKlO97BrUitPO5E7pThbNa8UEU6_GZoWPnxySi.nT7w3E.T7wGqm_I2DJwz9DixqN02; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nexpires: Sat, 21 Mar 2026 17:41:05 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wc4OZ6%2BpMNtBGKHpsHiA%2FW2EHZldm7ZvfWz2fKW%2BAgtL4iC84pHdpqzq%2FXHKoHvHgZZ1y4C5GL0e%2FgYS3%2BjibhVNXkw8HoBsaFu4Uq%2F6yb3Nrm0%3D\"}]}\r\nage: 2674\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-350b\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83adadd9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13579,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13578)","md5":"f4b765a9546788982525c8a3553e89a0","sha1":"7d63a87af57a4817902dff7028c5eb67a7cb3ab5","sha256":"40d650a4d6aec8a7b5d75907a552768f2df82848d3309a378029fc86accd4517","sha512":"7774259bc01f672c99b7ed40a3ae4f3f8ee403355d9f71b955cac3c215c23235852eb216fafd128b92396d4e3d27b41ad34f15a30c21e238112d176f3150e7a5","ssdeep":"192:5aKQrrxX/YyrspdNl3qLq/1R9z7g6mbftDxzNfDFDfhf3fOfNf5flt/1ttTptVFg:9UVwVELPh+EDaLDRdng","tlshash":"3752ee07656f33b829ef653726f0f7cc9a3c4879c7126564a8d2a2194b8f9b006717ec","first_seen":"2026-03-02T15:10:58.211677Z","last_seen":"2026-04-20T15:04:12.642815Z","times_seen":32,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/gameDataProcessing-Ks6c2N4W.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/gameDataProcessing-Ks6c2N4W.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-436a\"\r\nage: 2658\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=xXuDPffOVDdNQySH5APtWZwNqQGtVnLSSFLrxcdk3tA-1774113940.0116758-1.0.1.1-jNdCsUrQLadB_nlucR5VShe0HVasNjPqBZWdZ4DgvTz8EHV9kTEiHImIP2O77tCE36M1AqRTfSKYxR3t7RJ4gvo.hr6CrKgoGVcuGGsaLTb2C7ox0aZCV00LjVlQ_UDm; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wz3WOfC07dWzo405YIvbnGjHWKi8cs%2Boi%2F5WWCWIw0NXMeVEf5xjmhmb3uIkiCYseKDmhgoAJlZ0OUByFOhEg5oYBlBDCDEgnHLH%2BsjOei8MRGM%3D\"}]}\r\ncf-ray: 9dfea83b0af69cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":17258,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (17257)","md5":"562c976b249b698e612c65de5413894a","sha1":"97d5db7493db7fecba8fb8a6bd98788914477ce3","sha256":"aff1e7c461a2b4748712c13290cffd9c9cb82c20a5a3ca0cb69daf518b4259ad","sha512":"964c4854f9ae661cd8b9d22989cd6f6cef23c5ab7d06878f74436c982f64d30bce6680eb383af7636984a041791658ef520bc9e8f871c182b9231d24fbc76c7f","ssdeep":"384:7wphrrZxhxlVz12awqhvTXDsB4Pzenac0aw5K4A1nV:7CptXDe8QiAX1nV","tlshash":"fd72750b8a024c12c97e4639c0aa15f1b9781b32e8b8cdd51a555c7afb5fa5b31f173c","first_seen":"2026-03-21T17:26:39.382141Z","last_seen":"2026-03-22T00:40:18.016304Z","times_seen":4,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_dd011454bca0ee68d12e80f496a94ffc.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_dd011454bca0ee68d12e80f496a94ffc.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 171928\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 12:09:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69bbe767-29f98\"\r\nexpires: Sat, 28 Mar 2026 14:35:57 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 10182\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=Ck2bThu5XmxdhaySPc43Yu.E0KjmOAnVrvjBzT_eBIc-1774113940.6298053-1.0.1.1-8j_z2KJ7C7TPnBmaL3sUgOLlLXrfLnE3JcRLGWDIt6UqLX3V64Uk_WOWq9h.fbVx5A8mxFZ7geMVJSyz3E4Vk0PdHUUGFbhosawrhIXIwwzVCMgpJCn2vBA7Mb50WmNT; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nUQ6X8Eqa3C9Nbh0MErRI04HR6spNhVUnPZ%2BoUWn7M9A%2BEXJnrcdz04Crrcp469ahcCw8pCu%2BkIgxvf9WuUQBSZpTAGWyDKfK0sGY32aijsb5Zv%2Bhg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83f9be39cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":171928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"784f97d6e0b3fd0c15c2160a8f7f45c1","sha1":"c99b2b391da6c2eaea9dcb23e6f7f232ae655847","sha256":"660631a08d704f41dfd2b176b70ed253d6f72fb2982915701e1fb024769b4d4f","sha512":"951f825e7014fc70b7d22618022c74de6ad2134db53f02e9f0105a3435816089d6b8e3319dd788007f765e94a59238d93174cb104e9d2f811196cb9638a3eb3f","ssdeep":"3072:JlBEdgLJC/1CCOK4BTLQHdfX1LwF4/5zCs4sRpI8L+O7+pnU:X5Jk1CnBHefX1LwaRLFRt6O7+5U","tlshash":"9cf323a4410b1e3b6e1bba0003b87bb42bb376758e9ae6c305b1d4559c42177edf887c","first_seen":"2026-03-21T17:26:39.384005Z","last_seen":"2026-03-22T00:40:18.211413Z","times_seen":4,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":498,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/CasinoGame-ltYKuqgq.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/CasinoGame-ltYKuqgq.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:25 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-16ee\"\r\nage: 2655\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=BvFVhurBBNE7BVA90zu.poxjadvzxJPnBaHAt8P4j8I-1774113940.1106336-1.0.1.1-09k9sFQU9AioSuUHYHPG2LIvJ_dN0ivrYwpraJa3AIRSkOOecqRHLXl._p6BqowiWJhX8Q_MQEelhPjS9.AHD7RHSM76SrqxkdoyTOQH7MgM62.Eyu3eZNGkxl6J9jPm; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zba%2BXcQGGekFEH4wpbucEP2zHbEoBhtBLEKLFqO38va3DbiLKEKxwoCqTRglUf0Q%2BNw4qS66IM0x9gFmQrRSJ7gkP86XeC5elXmXPle5R%2F%2B28WE%3D\"}]}\r\ncf-ray: 9dfea83b1b009cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5870,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5595)","md5":"9e451ef9a803c3f7b894af280148f56f","sha1":"8e10a59fadeecc945cd891c09f4b35cfcb109ed7","sha256":"ccfacd7e71cef622fd86d8549b91f69eef2eb67ba6604f9e7117a03d58a4e8a4","sha512":"4e025ccdc94278573d5a9df211da737ba379dbcee75021e6607a73f599fdcefe50af54c76174bdf4f6c0fb0ed1a66d3b4dfacc75d5f5854452e1b77d3a16e8b1","ssdeep":"96:jL/bVqh2iJMeVZhL+no0JzxF+zZZ9Losc3MM+xA5Z9gvWUwBVTCV+xRbK:v/xqhCex6rGFssc3MFxABtCV+xRbK","tlshash":"b7c1b445e024ebbeb83a08d9982f102574192fe5de198076f4bda839323c15d7627bde","first_seen":"2026-03-21T17:26:39.386441Z","last_seen":"2026-03-22T00:40:17.789882Z","times_seen":4,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 628\r\ncf-ray: 9dfea8439bfcb28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfaRKjj98wG78-Q94g8ciN3whHfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1019+1 c=0+1 v=2025.6.1 l=628 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07a8ca43077147f4b93899efbe31ed8d","sha1":"bb87180866adc635991e4867c8222fc4387331ba","sha256":"b22b238c613c9bfcf13e8340213b734fea3bd0b9b2fe67648e3ba6decc104e89","sha512":"6d9a2235c65c224e78bd78025eacb630cca9bc9c4a838fd540de031cca2e8c442460eae186359cb98dcb1f1eb867414c6b5b77c78a2f3e1be6f6f36b254111c4","ssdeep":"","tlshash":"90f062be0d21c29ae04842881a0c6c5da472a9b9fb4424c4eaa5f7a67c0319433a54b0","first_seen":"2024-06-15T18:00:08Z","last_seen":"2026-04-21T23:36:13.388625Z","times_seen":2172,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/DisabledMarketEvent.BUY5t_rR.css","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/DisabledMarketEvent.BUY5t_rR.css HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/tr/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=Ua3N8BwVtK56iwk7J0i.lWDPII1_VCPEwpA30T6iRcc-1774113940.0721047-1.0.1.1-xAX9G3HL5sCRsRJZStlSJKtv8hULcn271LPF405tY1I5W7.GugQPsoS83RAEYuazNKpDvGuwgKXFMeecK3GJu783A1t_jjWg0TmDK7KUqrMZgI9lY58skXjwOp5E.Vcc; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nexpires: Sat, 21 Mar 2026 17:41:06 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hvknYkyGxW1ZD34GHmRihdYNb9x44iYXxGqR%2Fqw27XF4o0Qk5riykGYFVdr%2FSiAN%2F6tjJ2V7TH7MxrhVDm%2FcoYYTnGmIUvaJ%2FnPx3VkSh0QAOyM%3D\"}]}\r\nage: 2673\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-2c4\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83adade9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (707)","md5":"c0742f5af30b5e1ab1e9e3184a8d4adb","sha1":"06509c5248ffc14505b70fdbb23fa513986eb50c","sha256":"4b6712623061506cf21b8296602cd61def3d0a81b5cee16bd0d245e7275715df","sha512":"7050ab375c9e4b209bda0bd7ce449e76da69f00d56d7a9504a52eef1e36fabfb8b36f9f560d810edb4522247e15d17cf736e929f40503802df2035007d1494ab","ssdeep":"","tlshash":"4701d4c4f98a25344c3a9d0c9abc8fee560a93705ca15d33789a113a4bce08a4a20d26","first_seen":"2026-01-18T14:34:50.585531Z","last_seen":"2026-04-21T21:26:35.763539Z","times_seen":322,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FeaturedGames-DmW74qti.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/FeaturedGames-DmW74qti.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-1ede\"\r\nage: 2658\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=HpC4hpoDeVOGV4XCkoLw_k2i90Bx_heOAVXVq8RngqQ-1774113940.0576148-1.0.1.1-KyoOiO715h6MFFLYOGGCGbKAF60wA4rk5kRIB9Jj5OmUZDeO1EybYS2C81CjcRIgjg9Kb1KrH1Pu0O1F6.OTUR5hWDzx_vtCik0Cg_vxFmg3oC_QTLdHa.eMUzzcWMM5; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgfSNyoukY4l82eLPdUzJ4v64Bpo2naCO7%2FOoNg%2B4Kq1K7Gl%2FeU9k6R7o3Vv62kkcKk%2BhLfVQXptOb4TDGBKroKA75VJEKDBk%2FjhrUyDm7JBIQY%3D\"}]}\r\ncf-ray: 9dfea83b0af59cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7902,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7901)","md5":"19d9e6b05b0ea4c2aaf5ff097f62ec60","sha1":"74da87d2807e21cbebe3f99804c583b50dc62a6e","sha256":"1008f34230526be542075acb3e641fda44c1617623c017461ba74c923b97e742","sha512":"c59507f99048474eb0597fcc27a39d06f2b2d9231d85354a2d78d12c6ca76c71b2a90f1d4d56984429591c0cccefa143a20eeed9eba60200d42da244f93e5375","ssdeep":"192:xPV9D3fNHnEUDuHDY2bBEoOhC62JmMwL4Bflg2yD+l:FXVHnWHVbBE3hmS2Sa","tlshash":"69f1fa0ae015fa7de67b49e7b53f5108f47a0ad0e7280890d07e5e1919e9246733ef8b","first_seen":"2026-03-21T17:26:39.389562Z","last_seen":"2026-03-22T00:40:18.039261Z","times_seen":4,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/1417.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/1417.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1518\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jun 2022 06:51:21 GMT\r\netag: \"2f40e208475d81:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 19:10:45 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 166496\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=eQww_MMD8mz4d76.uLubeKZkENeRF8Vxhi3kPJx4U0A-1774113941.6178193-1.0.1.1-E.rBnEYo5Ei7fMZOkrblR.P8cgr3Qsg1bcX.vYA05qNhu71XWg.pvY2t5CaA7r7qs5oDJ5DmmxmTHcWq_IeVBeCpdmtGQSzgU2yaEQOWTpQjMv6jk4D1wj2Mb8CfhB41; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srG9Z2odUAEaXo8%2F67KmVl49ScnUJDL0J6ZGYFcNRH%2FwRGrIxITdZ8PCbBQqDe5YIrDXtpmvPsELgK18yny6Yts7IFfoecgA%2F%2F9rcHruqYri4Pm7gF5GlUGddwE%3D\"}]}\r\ncf-ray: 9dfea84718c45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1518,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"bed8092a3fbdff70a795f74fa2635dee","sha1":"babdf757d5b081fd5618905f8188235c2f9cad77","sha256":"be1d76729cc05848abc6a844446026e3df708bcf40048cd58194e2f644e5c932","sha512":"6d5040825627598532ce37a8e3801faa79e9787f7391123cd5c4e6cc40e70121b2d3c528c2b453cd95fdfcfa3aa17699e8619127157be50d1a66a6e65c7a088d","ssdeep":"","tlshash":"1731d7636799793e10b223ace2121105802739f9ad21205cb44032be659bb4a5a086c6","first_seen":"2024-12-30T19:32:04.717177Z","last_seen":"2026-04-21T21:26:35.547433Z","times_seen":32,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":21,"dns":1,"connect":4,"send":0,"wait":18,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"dataspot-internal-wss.galebet1065.com/socket.io/?EIO=4\u0026transport=websocket","fqdn":"dataspot-internal-wss.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:42.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dataspot-internal-wss.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://galebet1065.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: m6ELB/iOZKxV9xYoQLbDPQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D; _ga_MCEY36CK22=GS2.1.s1774113941$o1$g0$t1774113941$j60$l0$h0; _ga=GA1.1.1652025929.1774113942\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 21 Mar 2026 17:25:42 GMT\r\nConnection: upgrade\r\nSet-Cookie: io_affinity=1774113943.783.35.44862|a4492465e2c0cb857f789e83929ab8bd; Path=/socket.io; HttpOnly\n__cf_bm=nJJo.t1FY1e7x679kVFddcbyBMgwT2APAMvLdAxzDvc-1774113942-1.0.1.1-a7m.w2tOAuO2cVopj1aPSA14jWTnP0FsL8MIsRhzbu909dapENH8rlAYNYfFPzv91s47ibCfmBIQNJc4oTln9KZ2eWQWhpoPYl6TcwA_kQQ; path=/; expires=Sat, 21-Mar-26 17:55:42 GMT; domain=.galabet1060.com; HttpOnly; Secure; SameSite=None\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: qXMWxAYkmt53pDbszlcn/QNPBMY=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hu2m0P25bE8kAGxZ%2FNY8BLu9KD1h6tbi4nQqOO0jqS3xFzmUFDN9SD2413Naytuwhpnklb37YkCiaeZsUHqKlHRDC3uiRpQD6s%2FybWiEOC%2ByNawrZezUith5UyibOJrfoRBu8evFTL9SHc0aJ5nff92xAymDFUBU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nServer: cloudflare\r\nCF-RAY: 9dfea84bb961e07c-ARN\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=64449\u0026min_rtt=64289\u0026rtt_var=24429\u0026sent=4\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=2836\u0026recv_bytes=1739\u0026delivery_rate=43433\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=545e0e9ea1abbd01\u0026ts=171\u0026x=0\", cfL4;desc=\"?proto=TCP\u0026rtt=7890\u0026min_rtt=7806\u0026rtt_var=2248\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2356\u0026recv_bytes=1587\u0026delivery_rate=365333\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=f92d707979bf91a5\u0026ts=566\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":40,"connect":48,"send":0,"wait":556,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"dataspot-internal-wss.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-internal-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-internal-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-internal-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-internal-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/img.gif?f=sync\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a\u0026ttl=\u0026rurl=https%3A%2F%2Fgalebet1065.com%2Ftr%2F","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:44.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /img.gif?f=sync\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a\u0026ttl=\u0026rurl=https%3A%2F%2Fgalebet1065.com%2Ftr%2F HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0883000fa8504630fe0f53f5cf4fbc20; expires=Sun, 21 Mar 2027 17:25:44 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 9dfea856ff408deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-22T00:11:46.432437Z","times_seen":97878,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/TvGames.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/TvGames.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=asjPWtzYUHvC_vDndTcj1kpUS5XYOT7f_FXR.Dv8Q2Y-1774113939.6801739-1.0.1.1-aQrU95Pj1oKJiYoqQJEilunJPtrc9MDP0Z.ODZ1P44MNV0r.aOhrZyQozq9UHhvH5nZke7coI8Unpl5OB4hsd_U0tfvWYXwjKOqT9iBSn0j6wwou2eK2LR0YxnTGpoZO; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6CXqYi8W3nZh9d%2BnY0AuCR89i%2Fo1g2wFO%2FKntil77r2A%2BQLyviauEGdmzbxtk1x49hMw433AIYrTAxrbgUplNJPDITM3lAz2nPWGRbsP0WTgHqnHA%3D%3D\"}]}\r\netag: W/\"686270a7-c81\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838e8ab11c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8cb4d739571507bd6cd3b25a15163537","sha1":"f8061ea6ba5d599b463f5f146b407b0f6fbe4bfe","sha256":"3b2f15bcef3e58ac040feea4d073d42f18e48bb6f399c4f9f89845931f87085c","sha512":"38862ca5d9bb144dfa4b9c0568f05439e788848d45f8891fe508570322d34200ecb0e3f70dd9f1e8ae5659ae3333fe154d439e797c556ee94fbf88f47ddc3cb3","ssdeep":"","tlshash":"41619c87ff3089e04a7c5f99af6840d76689c05dcf731118b23c643e5af7d5884ac9a9","first_seen":"2025-07-08T10:50:27.694177Z","last_seen":"2026-04-21T21:26:35.656047Z","times_seen":437,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-WIMCHaiu.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index-WIMCHaiu.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:37 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-35fd8\"\r\nage: 178\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=fugYyiGYK9T9QVngwB9hWGqSkqaT_U_e6_r.QOndBF0-1774113936.778564-1.0.1.1-bRdkhrKxOuMs3LZsDBToysCl8PLsdb.V0f2_RH75k7IXhYbqqqeuOpYBFxUPtrsb7dWjgqUs5nHk2CyMId3vw9nUVtwvG8pji5ZxtxXMbV4365ziAmAXabZgtAecySOk; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JVqw9HZWr%2Bl%2FKdtz2ZlMHTG55O0Iw6QmQk6zUuifT5L1bbvpkG9%2Fp0lAzHp%2Fasti79LVDbybF0nTRIg78uWHFKfbbHV1vCWSgN2iXi%2ByMtk%2BN8%3D\"}]}\r\ncf-ray: 9dfea826ef469cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":221144,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523)","md5":"9b2782650ec3bc7acdc4746a40024c65","sha1":"6eff74730fa0eda9e5abafaa734c505751244788","sha256":"156c9584ae57455fcccc4ba27c44cf9a380e5e904a06092bae04b487ff57ca69","sha512":"0391894fcdf91d6ec313cda92e3af9aa61e90a611157bdb38e1853002c4d23cfe88693ab8f96be3e5c8a70d6290e505cecafb89e1279d08fd59d3addd635a4b9","ssdeep":"6144:MfeL9y0h4R78o8e4YaIALoh6wj9Sd51jjVvFavIRcDGRD6On:MmJy0h4R78o8e4YD/j9e5xavIFROQ","tlshash":"6e240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-03-21T17:26:39.395349Z","last_seen":"2026-03-22T00:40:17.969853Z","times_seen":4,"resource_available":true,"data":null}},"time_used":915,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/if-defined-CWaLTnLW.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:38.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:02 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-cff9\"\r\nage: 2676\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=AoShJJmke3.CfwE_rdDbdnWHbkEERrFSNxVLj_g.vJM-1774113938.8652215-1.0.1.1-WHlQ8t4BdvJiRJKGY20nHi6sYZo7KG.4hlU2a3tRox1az_B2D8qumFIfhC2Gm6iYnEgy5SyoeI3BTyS4MoaLGE2qiq4Fn4xtc_SJkLt4tnoQTOG5zG.l8gn371lP5skY; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbhl9T9UJFO0tl42LUSjfAu1owGDiAkidQXXm5ErKZjb92WSokpeBTnxQavwhiTehXudMYXgzdsJdyOsXq89nYLafBUApOunpRbiT1AfaBM3Uag%3D\"}]}\r\ncf-ray: 9dfea83459a89cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-04-21T21:26:35.697782Z","times_seen":581,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/gameDataProcessing-Ks6c2N4W.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/gameDataProcessing-Ks6c2N4W.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-436a\"\r\nage: 2659\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=yTZt_QQ2umag2_PCFCDbeUadEZRtViwJl9_Fht9W4uE-1774113940.9208694-1.0.1.1-WmFkga2e2j3Em9F_sDSUhgReDnJaSN.AnuYpcwoH9d4hiz59K0MiZiqCxQwg_6P9Co2SENqfZdTxz4jWu1riEiPTT4mJACFthCronFnTLxcSWCe7.Qe_oyc0Lfe8Tvvr; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IJQC4i11hoWYwXQqsOBg%2FYeAyk48JnPiwgCvrsnuF1wvSd5bt%2BePBnwvIIbF94SsAiwYMB2hUd6GX22PD4ZqULNHy9CdQOlHcFsE07dHAbdYDxY%3D\"}]}\r\ncf-ray: 9dfea8414c409cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":17258,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (17257)","md5":"562c976b249b698e612c65de5413894a","sha1":"97d5db7493db7fecba8fb8a6bd98788914477ce3","sha256":"aff1e7c461a2b4748712c13290cffd9c9cb82c20a5a3ca0cb69daf518b4259ad","sha512":"964c4854f9ae661cd8b9d22989cd6f6cef23c5ab7d06878f74436c982f64d30bce6680eb383af7636984a041791658ef520bc9e8f871c182b9231d24fbc76c7f","ssdeep":"384:7wphrrZxhxlVz12awqhvTXDsB4Pzenac0aw5K4A1nV:7CptXDe8QiAX1nV","tlshash":"fd72750b8a024c12c97e4639c0aa15f1b9781b32e8b8cdd51a555c7afb5fa5b31f173c","first_seen":"2026-03-21T17:26:39.382141Z","last_seen":"2026-03-22T00:40:18.016304Z","times_seen":4,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/dynamicallyStructuredPages.json?v=1774113900000","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /dynamicallyStructuredPages.json?v=1774113900000 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:25:34 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-2fc\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Hl.AEe9Tuj1M0v3IMlDsCkdwsilSKcRw_Si21U43hUE-1774113934.4778962-1.0.1.1-PmDD9kME45RMHYcGeID_5LMWIoyAXyPPRFj9C7LqPfYfm3wiuIy_W7sgdD05I4muw.3cmMzT.M.R9TLh6MiqVZHLDbeNR0Cz5VWa7Sts35WALAMQQKeAC_QOyPHjJiB.; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMpzfJpIOAgOGkvDhUKa7IFpa1NdvJK5%2FJpIyG9NsrpBo2R5oSNoUfxUdW7pzSkTV6G%2BTCYId9AxLrafIj7QCfCwp%2FCRMU%2Fz9YjG6NkYY2p0KCU%3D\"}]}\r\ncf-ray: 9dfea8187ce29cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":764,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"61ff5ed77b867ea7b436a21eb8e5ab4e","sha1":"91488963a9157554638375ada821c4bb44b12dd2","sha256":"8329002355bc98821e6757dc86bd87104c3f79ab3fa48db2435c5d3baf0ec870","sha512":"e93a660a89166b2b4f17735c7ed67f95b3b333006596634a735da5159f605181c8a74bffe6924a82feef888aea5bab127c2aaf77685cd27efbd0d71b9d888456","ssdeep":"","tlshash":"2001493d3c10ceb4f7a08862d58167809992e576c7880c5c2cdeeb19c3ad24e1441b7b","first_seen":"2025-05-24T17:16:20.011585Z","last_seen":"2026-04-21T21:26:35.682003Z","times_seen":2469,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/Casino.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/Casino.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:12:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=xWp0hPkzwVOddK4lJoLJCb4nAZSbP_8JvWXcsmoN53Y-1774113939.6871822-1.0.1.1-YtO0zD1YSK7AgwgGC8wcQ6kbOxP4cn9dcycp6bu1vB7jmcfvmslcyLpEDYS_Vu.UsHISljBv6cogJ1doxjUJDy87XoQfkReyuGrOIYPwlpK21C0tocbJxuM8cZx0DYi_; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRyJYpX751%2FZg%2BaMXZPftkUXfDOkY8B3uMznFOr7swm9Bgr1fX6w5OTb4TgbvUZhOmh40nHgbcVgPNZ5a2ok%2BHSCD1xB96rJnaTBs5CSOoCnnB9m0w%3D%3D\"}]}\r\netag: W/\"68665777-50e\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838f8ec11c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1294,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3df444684921a4a44f2dbdf6aee0972a","sha1":"f0110696848649c2c94de0765f5b22b4617ffe66","sha256":"d4f76e693c5a014a2184795ea113ff8f42a1f7196243728ee128fe81ed5b30c0","sha512":"bc7fb348d4746e017aa074bae5f3b106d6a3db9c1581876ba7db93537b1a4643a8c2695b424ae4d584d03664bfdafe1b3477134f7bc6f5bc142f8a5aa54fd4cd","ssdeep":"","tlshash":"1921dc3d470289f86e455db5e43a0934c69d817ab1c2479cf23eca2277220d8c7ce468","first_seen":"2025-08-22T01:08:50.698252Z","last_seen":"2026-04-21T21:26:35.792842Z","times_seen":56,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":109,"dns":41,"connect":12,"send":0,"wait":486,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:35 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea81d1e551a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-04-22T00:02:58.080583Z","times_seen":45136,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galebet1065.com/api/public/v1/tur/partners/751/seo/page?platform=0\u0026country=NO","fqdn":"go-cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/seo/page?platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5Fl%2B5Foc8Mx%2FVb37wjJmIUzyMC9%2BUj0MBfDznQ9vjEtnpHEIIVYD6ZBzx54ikwJ50kzcflFjgnusY58OEgOgTs8iCUuP5pJb9rJ4Nq4PEA6DhmQfY0%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=szr3JPqRd4CmyJqnqU0fbPGr4rvgxPCM8r93gLXeL3g-1774113939.6864674-1.0.1.1-IEY2yfrDfd5wRKNS52xEEhnNPlSu4YEb4RjJq.IZt2Kz.MJqlnQGDgEngYLhZLJg3beieCPdVJiXxip.xfpDPT7lpKVJ9i.AEKgbvQ8c4CRpVFwUwOUUNVnUnR2nXoNN; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9dfea838f90711c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7671,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c3cb355e0745f8d403e214af1595e2e","sha1":"ed786d0ae61ad6adce28150c04a932c4e9bcd6da","sha256":"2b7c48aafa192476fcb639519893f40c28c1de98bd5e66b84769edc55b047be2","sha512":"1c1840626aba24469d43e66cef0893e9627c25afee6ab6a955e6cebf21946e2cf3514c9587cae3c5815a3b7b5ceabdb18cde0fc4b6d5cc52e798e14c7c456b62","ssdeep":"96:E2K/6TXWpoS1kKXplSunUVtRQl8bqOHEyj7fuSE3Ytvkeu5Jbrt:E1yTXENDplfnUtQyDjJE3ovy7bJ","tlshash":"76f10f0e37962d9f038a5fca29564d3c4fd55386fe41a91c8d63ce1e2bcd278d22ae01","first_seen":"2025-12-24T22:39:16.082152Z","last_seen":"2026-04-21T21:26:35.674354Z","times_seen":46,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":34,"connect":15,"send":0,"wait":523,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"go-cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/jackpot-jNbP6Duk.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/jackpot-jNbP6Duk.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:18 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-178\"\r\nage: 2661\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=PO20OK56V9baqLN8sDkERIZiy1gz5yS8Qmed8d6WyCA-1774113940.000735-1.0.1.1-7JKnHogR3H22yAxK3u.JaphFcHc9kDtxR6hnaqwOngmsxZ9x7M9W1hNJTr9wGDp4wsab1UhE5UAvktWr9.Qsv7z39B4g1L0iXaqYGceKvZ7dIrwnDW_ayFZmHvxWZ3fF; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9j7tCXoFH7eMjUXxMBTHM35fhtDuBx%2FHKlfPiCM1KAsHGqV4QVAcwRYq8qMC2fNqdhWFfpY3IDDmsTNKl9UjCNJx6j%2Ffn2LDR7yuKaPwWMMCogY%3D\"}]}\r\ncf-ray: 9dfea83afae99cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (375)","md5":"c4e89512f1192d8bdeb452c2cce992bc","sha1":"1d30070e7d0ed0838dbae22c81c41430fb3d0d45","sha256":"4a7f2a8747580d38cb522b361b5cc73a8ebcdb6690f3f8d92d7dded5be8a36fd","sha512":"b548c62816c00d3df156b43a8e608d5d7de55931f121ecfda4e7296e5cd65208ffaf60871ba3b035cd43b5e2aae82b0965329a8c9b5a0821de5a23fbdbc12626","ssdeep":"","tlshash":"00e068eed8c08dfb967007552bb018840e2416ca101ec9e4be2672611800b8828f8239","first_seen":"2026-02-24T14:23:51.255604Z","last_seen":"2026-04-21T21:26:35.58754Z","times_seen":43,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-BgO3MW-h.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index-BgO3MW-h.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/DataspotTracking-iQyfe7l_.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:11 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-173c\"\r\nage: 2668\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ai8z511dqS7xYB57BowG3JKDFfzE39Skc2BQByB.b8o-1774113940.41638-1.0.1.1-FwjLXaKqfU5PXa7hEojr4xWci8GxBCAeSaqyHxfkEJFeUV1L6YE3ya6LiLYdTpgMbBYBF7XeCU.ZQq1GIN9Q.zaWbez0ife1DLz04UW4Guu.J3kgxaBfGEfxGc1m1Q39; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NM7kNsy1B3suzJmI72LbNY%2F7T7QKSZiB23%2FF06%2FSgPPu5zLDIdDHP%2BkNmyWToBx2QTM84fglL58LooKQ2hlHBtn0EQRZGWrK1THfskMutx9zo2Y%3D\"}]}\r\ncf-ray: 9dfea83e2ba89cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5948,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3085)","md5":"21a327b0619c3c1a324057951bbd14ab","sha1":"4f00a495a58ee62d19e6b5849989cc5618177634","sha256":"f69a26ae2b8c112785730a553e7f2b7d2b41ae889627f26f0b866746c536b6d6","sha512":"b0b3795759a6c3180fd9e4fa453572caf9644e0f2dcb10b11f1b5e526ad304a6fe0011fbf80296459ff6e8c516f52aecfad1f5ef58be025985b6c9c261bc7841","ssdeep":"96:q1SCtCFVeh7FHpokS73s9lsv2InwLRiTvHUgAaQKFr0FdWpA6u6PEDdxrOq+IHWE:R+ljijHvH0FdIuSEDdxP+Vj8Eu","tlshash":"16c1a65631907530c6d244a6914f42aeee3e7638f00f50a0b23f9c6d3ba1525daa3ebd","first_seen":"2026-03-21T17:26:39.40142Z","last_seen":"2026-03-22T00:40:17.987168Z","times_seen":4,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 732064\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea829d8cb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-04-22T00:02:58.11935Z","times_seen":36022,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 739827\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea829e8cd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-04-22T00:02:58.107387Z","times_seen":21500,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","date":"2026-03-21T17:25:38.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 17 Mar 2026 06:53:01 GMT\r\nexpires: Wed, 17 Mar 2027 06:53:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 383557\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-03-27T18:26:18.3083Z","times_seen":12906,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/SystemBetCalculatorContainer-Bzc0pnS2.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-Bzc0pnS2.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:08 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-378\"\r\nage: 2671\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=QFuhGkgB7zhdo3Fs_y6dzN9GaJtiS1AetuEfdgzcmlA-1774113939.5576718-1.0.1.1-pzjmScL.y37nq8uJ8dmn7VlX0X8coFcB2RgoeGgVfXXu6wwwmWUmjrZyVzA2QY5Tg1ATBj7Cy8qFbhYC.v_PsBKXLnaEvAxiraqzb5efiaIigL2SDdepCKOyy3IFGXtK; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bOy4LgKDmWaByZBfIVh5g%2BBawmbtTY2VVz7JKFv%2Bwuuer0q2RBKVOt4rVeBdvPjEsN3yuPqPsWUCO7ooKURhYeiEm%2BqU2%2BnM%2BNIeKWpJwh3WLJY%3D\"}]}\r\ncf-ray: 9dfea8388a289cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":888,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (544)","md5":"f6b4940b55d134e31fa03de3be679852","sha1":"127e610a7ad135553e3e7ff1719c5dd9f1c75006","sha256":"dec35ad6b839e544e8099d7d818aaa3a88db1ad559420bcb20f658e6baac2683","sha512":"b9020ec0e2690c517e86236c6c6d27f0ac074daaa07089aeadc99f8ab99c465223f5067a1ff613bca023113d204bbdf8242ddc2913dc11b38ab1d96370e65865","ssdeep":"","tlshash":"6c11cc566329cf70c49e0ee20a06a4540df50a29694cf628b6f18c38e01408243eeffb","first_seen":"2026-03-21T17:26:39.405862Z","last_seen":"2026-03-22T00:40:18.114421Z","times_seen":4,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/SmartMarketEvent-BbcnqqZJ.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/SmartMarketEvent-BbcnqqZJ.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-393\"\r\nage: 2656\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=nelIWN4PfOOyTCx54TTj6tJbsw6GOsBFw4DkXyatmL4-1774113940.89652-1.0.1.1-VFlUF4jvKNsnDyobc42cyq6XXO52FLj31lr9d1M1ApB29eOhDz7k38InYtEe1Hyw25wm8OquBXT1ipIf3iYjcnMKl6UBHZhf868Q7K0KvqL9TiuQd3oz7a2ZZVFr1edz; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdlLCp2tQdWCjo60zO0A9UvTW1wVCPm8Hhc4dUFl5YwSaprzUWqrHVZEq2fzK52H26H8i84iVHuTPFGx8XdT2gdTJMhMKYDTuUEIVlpGA5tqMqE%3D\"}]}\r\ncf-ray: 9dfea8415c469cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":915,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (914)","md5":"f2e243077781c5b4c30585af2daf3bd1","sha1":"7de46f25b06f1b64016b2f8ef354ecec2ca889c0","sha256":"88032c64572d2bf0740a517c16a6490fa0e009974f8fd42bbf8882e5a4937932","sha512":"4f46dfc7adc759e6df653732f6f6f1d2ad05d75229122d62478d3840ce62813a7f9c11d5c16b23ad193f158972e0638bc3f97e587dcfb8b1e595636313672fdd","ssdeep":"","tlshash":"1911cc96e480723a0672c8bdd1109f42416812d7db20026ae58b8af173ae0fea24ee5d","first_seen":"2026-03-21T17:26:39.407622Z","last_seen":"2026-03-22T00:40:18.157676Z","times_seen":4,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1337software.com/chatlar/16bce798aa7eff0a39106e935a4d41cc9c5ec31bef333fccde989abce04a699e_588-chat.js?v=1774113931.702","fqdn":"1337software.com","domain":"1337software.com","tld":"com"},"ip":{"addr":"104.21.18.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:32.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1337software.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 21:22:41 GMT","end":"Sun, 26 Apr 2026 22:21:17 GMT"},"fingerprint":{"sha1":"5F:95:55:BA:76:9C:CD:43:A3:6F:A4:3E:A5:80:66:4D:D2:28:44:64","sha256":"F5:15:94:C3:78:66:6C:E3:C4:E5:0E:41:60:9A:8A:70:CD:D0:14:3F:44:71:71:C9:21:DE:EB:12:78:64:02:75"}}},"request":{"raw":"GET /chatlar/16bce798aa7eff0a39106e935a4d41cc9c5ec31bef333fccde989abce04a699e_588-chat.js?v=1774113931.702 HTTP/1.1\r\nHost: 1337software.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:32 GMT\r\ncontent-type: text/javascript\r\ncache-control: public, max-age=172800\r\nexpires: Mon, 23 Mar 2026 17:25:30 GMT\r\nlast-modified: Mon, 23 Feb 2026 16:09:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f1BzliF0jG0uApPVMzbdGcEDv5yNBD66S1SEoqbVsrqLM18IICaX5NiLe%2FlQ3T1hiAFrQyJ3nIYj1mQlCGPtK0OVs6OhsoAi6m9FfG%2BvuBo%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dfea80b7956f527-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"9631d7a939c9c9d5d31fe4dbc95d1fbc","sha1":"c5e2b8bd6107dfd07486ae6b144ea1a2022e747d","sha256":"c8ebf2e766e2918f462d73c0a82200a78a5c42176391a95822cb7480639fc7de","sha512":"b9c71b1f1db243e18f54254695c1181b216618de865fd2fc5fa83d1b04758aff043904db913594a7c5c1a14df74e7b4133105632f2f9a49e6d354ca2a85bbe68","ssdeep":"","tlshash":"f5c04ca721c0a784228104d8c4c92cdca1d3510afe5b2ed2be374d2c500fed9a6d6c15","first_seen":"2026-02-17T14:59:45.011347Z","last_seen":"2026-03-21T23:21:16.884356Z","times_seen":4,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":58,"dns":25,"connect":8,"send":0,"wait":240,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/CasinoPromotedGamesWidget.C4EXhwOE.css","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/CasinoPromotedGamesWidget.C4EXhwOE.css HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/tr/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=IWw5gFfbpRGqHGswz0fw6teCjRjWro_tFA6dh7hrhhs-1774113939.9788916-1.0.1.1-3a8ofh9QyXszG8Odmm0GyjUae6uNxGweuETXAD9cb0pbcmFvFLl.BMDkNEs2dH8OV7UUbMdiRWTH00wrEUsR8EIBHvrFJOKfZhQog9Y.gROJFjHAUO_avRmHicTttpZ.; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nexpires: Sat, 21 Mar 2026 17:41:07 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2FR7ZG5gw7dSwgHn5I3isDxV1ZPknBcoQSLCbdILtOVsl9mbD4xWVwRAH6EMxvXQAqmHsEg5oR0lk5C%2BvouJUhh0tiYLy%2Fwb7pz1IKFanYY4YD0%3D\"}]}\r\nage: 2672\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-afd\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83aeae19cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2812)","md5":"09fc6c8eb905c21c7a4d044090184cd9","sha1":"0a478ada055f03e4574894d8fd6b86ed30d5324d","sha256":"d1f596a53ce4b0c43d20611ff931c0858b5d6c4c987b2b546269e639543dc878","sha512":"6811084eefb8629224c5ae7d6806c7f2b220d131a02f0c1a0c44067d684da4c1676d4aaccf513bcca338af6608ba085696056a3b70ebd6274ca6992035c3772d","ssdeep":"","tlshash":"6451250f445b273af1134e60a2bd5ed66acb491bca3b4b7cacd86157c3096c2607397a","first_seen":"2025-12-25T01:12:57.08487Z","last_seen":"2026-04-19T13:12:16.865277Z","times_seen":239,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galebet1065.com/api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dkYbh%2FLhLsGJLx%2BzsxWVPmJj0Psz7G2LQ%2B%2FsMKf0Ll0fI%2Fubq5cHS%2BG9pQg4AP0Ejqo1Ier%2FaKELvGWH%2BIwim6OQtQl9fBSG06dcQTOQZuqF7ZEU6q4%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=W0xsoUJbOfmjQCDGrDnYRykKPVmFWnxT_XDy1ouQ0K4-1774113940.1333287-1.0.1.1-50Zqt0F9Cp.SDgSj.ErYTxGji1_7DVq.ZQ6Vv5FhJ_5AbYRtKLACNW5mKAzV8TJRjhzjkVtsGfE7mnO0Ec6Ac.AkaNlVk8TgZe_6KyHZZ_4vgSRWR3Md6abWiGpBpRPv; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9dfea83b4d9d11c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1704,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c53c6baf03d9d67a244bdcd5b83a8db","sha1":"5738be5e28fd7a96351422da5eb5e7476f3d118f","sha256":"add45cdc8e4928fbc009eb0b1f0b1b3480071d954531179f11964faa592819bb","sha512":"f567159f19a9819c80050c91f9ac460301977a74f216d4581dc8ea33721af7c196d75ffdb8d8be1933a6c23fc0faad1b3720ade030dc1c095bebdb605e7402e4","ssdeep":"","tlshash":"0d31bb13b42d8dba5b517b40b4d3394a88ad5807ac0e8970dc498f8d92ea63dc6e32d7","first_seen":"2026-03-11T22:22:08.477244Z","last_seen":"2026-03-21T17:26:39.412784Z","times_seen":3,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"go-cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/GoogleAnalyticsTracking-DzsiAHbD.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-DzsiAHbD.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:14 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-3588\"\r\nage: 2665\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=y6b7YaMfx4HDkb0m0nv_TQQweX2QCwngQMo4oOaUN7c-1774113939.6193473-1.0.1.1-ZajxaLd7kEr79ZhQQaiwUdwNoECl6XpWX6HiryTvP58czFH24JlMS1RdCqkygPmhymIgUXzEDz9OXUEkMVlBMr2sinNQNyStYPvP2hz2kSKocKJoHYHYdj64UZyhWEl1; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQ%2F5b%2FMk3M5FGvGKtfCtZhsfM59xRLJYwPvAmcX%2BYg9d1z%2B1eIHA2xrF5sHVF3Z6EzSsLQ9c6Iq09i%2BNs4fJ22onLKGQ1r3B1vx%2Bk7x6VAsQPCo%3D\"}]}\r\ncf-ray: 9dfea838da489cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13704,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10208)","md5":"5c30b07b6e6d96a02961fa121d936f2c","sha1":"b9a4142d99821eb90ab286e8accdd5d8cca5497c","sha256":"3b654664159054341a4e796d088aaa15d5b0ae7a460e47c74748a3768db23406","sha512":"f10646c49bb35a7ce60f4021e5671e9bf71ca8e2b1865132dbe0b0c70794ed01afe084d178b81be5435d1efc99ed275c78aa0afaaa2a94d4b5eac54c79d694ed","ssdeep":"192:sWYceR0SE+m/CTb3bHXCT76h1QxGE0VK7D6L7kBNrnPsh52Lz2PM7mBE:1YcoE/CzCuEP3Bky2PdBE","tlshash":"7852b55c32adb0b682df6054587f720bf1755910a458f480a265edf46ef8caf02abf36","first_seen":"2026-03-21T17:26:39.415393Z","last_seen":"2026-03-22T00:40:17.807909Z","times_seen":4,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FacebookTracking-CT90FiR5.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/FacebookTracking-CT90FiR5.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:14 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-2a8\"\r\nage: 2665\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=gTUi0jv4SSewfpoovCD31.IOVGMsO.QcGumeifNx47g-1774113939.9712636-1.0.1.1-PwAKKjEzm2Xesi.CZJMd1hKe05hgDbhxCRMi9zhAqMHpwLp4PWC5YdRqxrHA96l2hmPOp7GPKvZnM1P2WOCQT3zA58XIcABE8643Hp3gCRhtvG.aIMIKsBW5hMUZDXGg; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGLP7ktQWtKQ%2Bh0cWijwzwEFx4g7NyEyTsQDOlb7%2FYI%2FVhJUOuTq0jwSzoEi1lk2geg2yMFhstG%2FnaBdXabR5HUkreuZMC24freYGszb90PXjIA%3D\"}]}\r\ncf-ray: 9dfea838fa599cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (679)","md5":"b0d0301b2eca6fd01c8c09252d6d09e6","sha1":"ef908a1000f37352b6d4953e7c167a79b92bf5ab","sha256":"6481d9f40bfbfe3c886be16fa7c69fa8857ddd75866b867992f82ad05ea17071","sha512":"e76daf2ef88da9da386b72ea073a4c5b5d62606628fc178d1b5237675b33cab92443f01354e8ad9fb130f419fbec9a44119c02e3105d229e1c18cd644e4e2681","ssdeep":"","tlshash":"ab01fe0f2c45b479167c18b8d3bbd81425ba590a358f84a5c6c3cda5262458640cdbcd","first_seen":"2026-03-21T17:26:39.417431Z","last_seen":"2026-03-22T00:40:17.952753Z","times_seen":4,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/DisabledMarketEvent-CPPtnhoy.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/DisabledMarketEvent-CPPtnhoy.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-a9d\"\r\nage: 2657\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=W.E5WWNfgQlXIs.97NaMPrj7iONI.qmcsSiwjx8I8DA-1774113940.8837533-1.0.1.1-68fYbW01pd6sMLqb3Bqsc6juAdBYVt5YdQBGlbfBPoE1.NhWLgO0mJKt.GvlFoE9seNLEXy8EFTZHryy_7bvE6CJo8sHytlRnXiA60MEUqyWabSdxj.kISLnWp2QUYsC; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Y3G0xrhR0EJ6bYf4zr8r%2BZTcaFX8CSwp%2BIOOZRqLKVucGUvE0ZXRQv77JHrwNqdB386%2BOR5df33nppgFVmuZYGEjnZvqaUMn9E4%2F8OoRv4%2BKWU%3D\"}]}\r\ncf-ray: 9dfea8415c449cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2717,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2716)","md5":"1ae7d8c222219b66a065ab6cd12346b5","sha1":"cd4e545ab58eea2dfb81e019db83b0c38aa163b1","sha256":"91e1c015e24443ecc166b3c80d23084b7202fc955efb7babbd75894b28316f08","sha512":"ce552e1c0f5315387462390ae80e21eb8ac37a8f52c4ccfc4db8b5a9ba3cc9f9b59c4582f2bd40031f7e198335795efef3aae2da13ca499359d5447a527b322d","ssdeep":"","tlshash":"cb51846df290fa7d993a04dcd23b1f1f601913e2c6590992d0be8c29151c0ee326efda","first_seen":"2026-03-21T17:26:39.419582Z","last_seen":"2026-03-22T00:40:18.068229Z","times_seen":4,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/113/226749.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/113/226749.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1211\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Feb 2026 13:23:20 GMT\r\netag: \"49c434194794dc1:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 19:10:45 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 166496\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=uGSTbhU8KXsbjFOc7FEANzijS5EPDkGm4f4B14SQ7Vw-1774113941.6066396-1.0.1.1-GQZfzwYHg6cFEJGtoUM8xqt6FrviFHNrqSK4kARsbBtVgOTOIJ2t54x5sSOHlkPAOelkR4a1bBOatyXZF5ZFd270rKRCtwx17C8UtUNDz_os66R7kfd7F7AWGWuhfwYU; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRMVW735O7i6AS8%2F%2FrZ6Z%2FIGy48YzLB4wvse4QaMmr9DO8%2FPK9apwDfYuFcvFgAfFgNiVwuRVBBsz42qUxPuy%2F8clajMJL%2BdG6cssxoXYsJ2acDMRNla3kv%2BzjA%3D\"}]}\r\ncf-ray: 9dfea84708435a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8d4059f6c4d43c178ee76a1534b4089b","sha1":"2342d8d439ab6949b20a055cda3572f87af1d670","sha256":"0c385c8f2df00af775674e28841f3de04b348f0c8a0b2ca3969b13b5638c9068","sha512":"e2b4959c3fcd4a65010bf74ff835c39d443a32da7c67e56800f4416527464805ea917166e70e09706245f6aeda10f5739d22855c7467efde92d12b2ed0cf42ce","ssdeep":"","tlshash":"6b21dad2dc583d2ee66bb4b24733950cf16882b7545b142c4603b2457f6adc0aafc870","first_seen":"2026-02-14T04:56:25.611939Z","last_seen":"2026-04-21T21:26:35.719167Z","times_seen":11,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/loader.png?v=1773142319","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /loader.png?v=1773142319 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 456\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-1c8\"\r\nexpires: Sat, 21 Mar 2026 18:22:34 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 179\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=oob6i1KI6cw3XX0cFA4bFud09oi3i1QugTL6a1CkoLY-1774113934.8694265-1.0.1.1-DV_lUf.L41YVSJS_hk0QIozKZ0LSlgL4tQpUQ5SAurlFHUYhrWegO43v_O0zu6Nm4OmaZcrtu0wgVgfuRugVRugF2w_I9Bx9AgTUjLaefCt3uG.JMbp6_5KOoyqH7zwO; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJ7OuWoDbvs7ZcHaeB%2B0bmr3%2B5na%2Fbyrsd9kPwsvSbfS6cAkp8Rpa5gChjCiQipH8Vmv50GzIShMQn1mDDEMbWwpUVujDussOs2FZ88bXpqHw%2Fc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea81aed6e9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit gray+alpha, non-interlaced","md5":"ce13d4aab7656181924146d7eefb42a7","sha1":"89af3054ab4cf389e7e905d2ec756095801680cd","sha256":"393b5575ab9863a7702eb2a6bd7405f3118d0da53ff1a3257d1d7353a056a59c","sha512":"4153a0d45eb10ca02aa1bca3f3dc78529b3d1a23d582ab9f5831ba71b9a5de126253d469d28276160f1ed27de41049491125726144c40e17a5fe2c26a77406b2","ssdeep":"","tlshash":"14f023d69fe31ffaccc05a9a7437c3710c22824a829936149107009c645ad2f8dc4e1d","first_seen":"2025-12-24T22:39:16.322656Z","last_seen":"2026-04-21T21:26:35.54586Z","times_seen":39,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":446,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/LiveChatInc-BwBeRgTB.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/LiveChatInc-BwBeRgTB.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:15 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-b68\"\r\nage: 2663\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=E78l4O3cUAUHG.5902pegXEFJGmbhmnG3tZbIATyim8-1774113939.6192513-1.0.1.1-Hx.P2WByuVog..1QqPnj9A9RIx.mRVjjY5ymaGa4GjhVek2p3HhZf7kXbU_6R6zNlUMQJzpOR8TSkoP27XOlhJDaJ7yjTEhk7SYto8VMKJIgFwl1bzTE7guQK.c9HT11; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FDSqWeqwVB242ygMiTnn3jAEV2NGRy9d1nT0pD%2FpZiH89XJlZs1cSlkvuyiWMhKZ8A0gdO1WtPfiaOtgqJkP6tBe33in2q7OY9zSCAeINW9223k%3D\"}]}\r\ncf-ray: 9dfea838da4d9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"ad95729555f741c465445ebf3651cf28","sha1":"35cd25bbac874733d0a3858af8b224eef62c8201","sha256":"50bdec45d97816d59745395248bc7435f2d1da33aa11b764e9f933c1f4d5c4ba","sha512":"79a4e2988c4d3515744af4888469b744d228f5affdaeb7716bce28e24fd9e26cbbfe20cb40095ddc128d26f953b50616470237d22bd98d2131830798ed737955","ssdeep":"","tlshash":"e95124dec43cb4b192ae67d1323f7b5f71165b1aa4048d31656c4f0af62a0cbc467aca","first_seen":"2026-03-21T17:26:39.425495Z","last_seen":"2026-03-22T00:40:18.011274Z","times_seen":4,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/SystemBetCalculatorContainer-Bzc0pnS2.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-Bzc0pnS2.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:08 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-378\"\r\nage: 2671\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Kys98HT_2x8Tc69dvTRLzd028.ZIMi8xzABPa09L22c-1774113939.9535656-1.0.1.1-CYZPtjRKdDOSxkU2ZgKbSqMcrIRjW0Rbda9p4zwUmmoIGCdnCGltJalCbxXxQ46RtAcUAfvXEe3RZtx.FHkOEY.EUGDLiL062.3e8unEzHbvgi_xoVgC9aoT3W5hMBdo; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BeBb6cP6n%2FKDJTe5PRaOfpjdCQYUQBjWAnnKi2UHl8TuAJGwMNGkiZK4E%2B6jOWlguyTBowYluFatD%2F0D38DMWNSWXaRU7Xk9FN%2FiEAPmtF2LOmE%3D\"}]}\r\ncf-ray: 9dfea838ea509cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":888,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (544)","md5":"f6b4940b55d134e31fa03de3be679852","sha1":"127e610a7ad135553e3e7ff1719c5dd9f1c75006","sha256":"dec35ad6b839e544e8099d7d818aaa3a88db1ad559420bcb20f658e6baac2683","sha512":"b9020ec0e2690c517e86236c6c6d27f0ac074daaa07089aeadc99f8ab99c465223f5067a1ff613bca023113d204bbdf8242ddc2913dc11b38ab1d96370e65865","ssdeep":"","tlshash":"6c11cc566329cf70c49e0ee20a06a4540df50a29694cf628b6f18c38e01408243eeffb","first_seen":"2026-03-21T17:26:39.405862Z","last_seen":"2026-03-22T00:40:18.114421Z","times_seen":4,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-CnlG40EL.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:18 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-101a\"\r\nage: 2661\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=YOdrs7rifSiffzVVwXkm6c6KKdSNKjlh6FLArgE3DGo-1774113940.4388125-1.0.1.1-AemwXAha6gdEB.Df3CsCVAPd_T2QpERpR_ih0dBGN8uabDkyCrri2U9DNRjnWwRdQY6Z_KeK7o8xPSnHzS5hMzWpPazXBTJkalzneCbGEmiVfLy3XwakX9PkKojXooKo; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FZPUdgxCtn9Bt4e%2FX4%2BiIyEwoNPsv36SXwN6GbsNr4Hku1NQooDAhtycakQ9RGq1FESc%2BkX3noVtScEXAoYzxaSwW%2Bcr1e%2Bj2%2BYlOT2y37AgkU%3D\"}]}\r\ncf-ray: 9dfea83e7bb09cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4122,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4121)","md5":"b105b9d1c817d1bba91c163aac4581d3","sha1":"c22908ad81be0a8e388a40eb1e251cec4abb6092","sha256":"6e3edc344d0220e455f2aa549e20a36ac03f5cb02ddd01f318d9f7d3265c2970","sha512":"a468fd003fd463ec56511dfeedf72a9b06a95e17f3a6aa9dbef93e99c2444addb4af59cbc7d35300e1fd95c28b8c60b4d88d025b8a1cea8ba2c6862de9769f60","ssdeep":"96:5SubClTBeLPTGNlTJC6YacmDD+oXtPeYFaOatTz8:5bJYE684KoXdroz8","tlshash":"04818617e01ab3fce8ad04a2503f910e377e0bfdd75604e4d0ae09240a7d85af259bda","first_seen":"2026-03-21T17:26:39.427542Z","last_seen":"2026-03-22T00:40:18.100275Z","times_seen":4,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/1055.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/1055.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1666\r\nserver: cloudflare\r\nlast-modified: Fri, 01 Jun 2018 12:08:10 GMT\r\netag: \"ec3d3d35a1f9d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 19:10:45 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 166496\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=D_qw6bkrqKZyxtcQUzkFGJv4aQGlf1sOtaY7LGDFYWk-1774113941.6126552-1.0.1.1-JfgycBaohatA_EpUq9puWfYNM_mhd3ElLJtPPCaRl1q8GdnpDTbPDwfyEVBf2t7K2LThbnxSCypLh3hzU3osHWRYZmQciJA2OuuF0AQSzz9UBwFkd_Hd1VPy0Ioert2m; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xvb4pEN50txcyhR3ZKvwAqEY7MBy%2Fid0QmF0bbLwAYh46deYP5ppTl4MY9W6Vd%2FBV5C%2BEIzjkzT0XI64RcxH7YSh4E%2F3Jkfz7nm6Z1fqpD%2B3YWL1GaZ7G%2Bz3smY%3D\"}]}\r\ncf-ray: 9dfea84708885a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"322960706bc027089c04c5c6662e0d99","sha1":"25ce1aa31202acb4ac3a75d8f74899db812b7097","sha256":"bd3095f46bcd2ba38864bfae3906ec99797df53d2ac534fcf57cc5bff0e9ed7b","sha512":"0ab1a8abe1560d9bbe71b06d84f47e1de4289b96d4290b5dac7ecf91416511a5126b179875ad6cf54b6b47f1234e72dbdd74cf1ba1d1426680071fb5a9ec83fd","ssdeep":"","tlshash":"3d3138c209b57c08088c343be904737af3b02c5458aca64c3e7ccdeac992288fe26630","first_seen":"2025-09-19T15:02:44.908763Z","last_seen":"2026-04-21T21:26:35.817094Z","times_seen":29,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:43.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:43 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9dfea8534e014e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":697,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"cebc7667967e601f02df39ba19712d86","sha1":"c7d3677008d76115cc41ba1b734aad112c743dbf","sha256":"089867e58a1de5998b0d74b779119d8a30fe54616ea3ce76063a5530163febea","sha512":"80a26888852e4a15ef49580494958b710628b404f4026c5b218daa918280b24a8f2fcc698ac49ee66c6e9b91954c54f5f296abfd4645d71cc32c83d4ba199378","ssdeep":"","tlshash":"2b01c07d5b86312454f634906b2bbb4a743b12be5c535808848d0414a3a8bafa21add8","first_seen":"2025-12-24T22:39:16.348988Z","last_seen":"2026-04-21T21:26:35.711167Z","times_seen":35,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":41,"dns":22,"connect":1,"send":0,"wait":68,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/walletConnect-CiycSUBb.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-7ce\"\r\nage: 179\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=o7zLFQitqQE2J54ZYqk3rui.7aVq1VZK20Lo2R3sE9Y-1774113936.7924454-1.0.1.1-vAbUEyUlT2JVicNLRK5ZZPaLI6zZi5YSi04dlj.6wjhr0nS3JB9JifdMCGOd49CnhBqp8wD0I0.Du7x2wym_X_Esk17F4JKLcqpuUk5moZRD_VdwXhAxowmYD.WOH53i; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yBB8BLGDBzBJIK%2FICJf8zsZLSRA5rZRPSOI9N1FS0hm0eN3U43on6xQQX1cL%2B9aclREvQ0Muh9c5QmPjRMG1X5IJjz%2F2xWDIUqq4na5IwblwXt8%3D\"}]}\r\ncf-ray: 9dfea826ff4b9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-04-21T21:26:35.533835Z","times_seen":1601,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/eSportsLogoSportbook.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/eSportsLogoSportbook.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=hfK0eEkibPber47aulyQvgi2TMTtrR1Qlx8m1FhYeXk-1774113939.6764328-1.0.1.1-GLdSLrF8ShJLHVMA.3jlM2bTRK3SgAu0OBigJEZ1Hm65332g8GzWbub7Ok3.zOI.tZ5KQnTRmSIj7l2gwMHsUA_lCSqH_APAyav_GF7OhbyhLPz_tTsxNb1VMQJWy5Zo; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vH7XGXkmKJ2uhfwkv%2FMKIgTO5zq4kIiFgDElGzJrtsi4LVEIeDcLmxpVHxCfwjt6qSnKHuA4SpFmmalD0QxFZRIa5CVuxF91KEjuQepsF818p%2FWCdw%3D%3D\"}]}\r\netag: W/\"68627053-43a\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838c87911c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7947853d1ed29dd8dcd4f9f507e49866","sha1":"cb30cb5a0f55083522666ec3424780ddf247b264","sha256":"676e17bd005b7d157e248a40b8b8d0e1009615e5b426510dd0f5d8a158fedf9b","sha512":"0c46971a79be56e827f5df0f1f3bfa7583bf8a9b273075894c07378b3dd0ecf6800426cc7a9d5833626655d9f0958aa57eaf50ec7bcdd726fd78f3176efd9290","ssdeep":"","tlshash":"7c11d82cd3d8847cec39e3bc51356ca4704a48daedf6d275e25b89b05713758065cde1","first_seen":"2025-07-08T19:55:59.718474Z","last_seen":"2026-04-21T21:26:35.726113Z","times_seen":295,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/660.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/660.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1474\r\nserver: cloudflare\r\nlast-modified: Thu, 31 May 2018 13:35:29 GMT\r\netag: \"6253a43de4f8d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 16 Apr 2026 14:05:17 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 357624\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=mNsv.5xN6Wzmyf7TchdlG9jEe5BZUKnMpVEGu0SkmDw-1774113941.6163416-1.0.1.1-9kITutPXDbw1YBy2ewXBwI.Z2Cg.n9x7NIORJPSYTelUxOAkDzmzHfaVC5MeopIBY8r3aJGAqw8vz95SVIulSgwD0j2FzRuVQac2rV.MgUDVh8opC6LFJljR8rwZBSZD; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yb%2BAECyDGGE4aXa7ITyn5FxzXeccqqIyhSzRQhwt4S%2B8HyqYhDlPFlXvnA7O1Or%2F628jR49iyFmlJpCWw0qXWn7hNyKZylrpxEJIjYn52My22MMD9FiLvFhKmG0%3D\"}]}\r\ncf-ray: 9dfea84718ad5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1474,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ab6160c1221b85b351fa44965bca35e9","sha1":"48b56405fe8f6b76f022e44c316a3a53ce5f558e","sha256":"98555283ee37cbb0d2d88c5a8cefed7dcdeb356845619742e3482b3bce84388e","sha512":"45ce37693b52634ce0e9db1b21905f04c4616779dfd727597778571650ff6af41981552345d1c60cc15e2cdecda17fcc5208c64384e2773d14e5f69548f15c7b","ssdeep":"","tlshash":"2b31e92b8d0bb01c7c1924bb2e2c2915b31949ed0671ef365b73d2b763253c48856e4d","first_seen":"2023-11-07T09:35:11Z","last_seen":"2026-04-21T21:26:35.740957Z","times_seen":84,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:42.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/immortal-db@1.1.0/dist/immortal-db.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.1.0\r\nx-jsd-version-type: version\r\netag: W/\"ee25-pMHxoJFNs7/Bok84dZEhK2Ol9UM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 21 Mar 2026 17:25:42 GMT\r\nage: 988152\r\nx-served-by: cache-fra-etou8220189-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 19803\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43474)","md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-04-21T21:26:35.769117Z","times_seen":323,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/Promotions3.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/Promotions3.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=dN40D8CmuG2o6Z2fXA_NJFp1_MaRm9oXAR1hvGGXc3Q-1774113939.599974-1.0.1.1-4QT_nozBTIGMxiou81m8QZVfuNLZs6rc4Gsw0FiNh.jaB6uOsHkzZ_mQH_OGsplcEvOFuYMqc_eye_2GGlk7n_tSuO_JbrdAyYta5gWuHxlwMHpgOaP.Q5PgXtMZtds9; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OonirKmmjvjpxmsB9t9UpVRCpwiFdDx8MhE9GXbse2KcLz2tNHlL24C8xObCvf41bDCV3cdp0Ws3gQiAbPrAaddKZ1VUiowTo9ONUE4U%2BqxNbrn%2FyA%3D%3D\"}]}\r\netag: W/\"68627085-710\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838d88111c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60e5a10a5bbcc415db7edd6ea60aec4f","sha1":"65af716c48e21ed7c837e77c4b7c3e2f33205dd3","sha256":"a8c1d1768e9efff44b10ffebd02cb4959af6be79610cdc02e44e840f0ec39a28","sha512":"418d3b818cc59a64f5261e2cc27fa2234ef1bf94a886866217d032d211c2ee47b758410154acbb7721314b855778c3e6bbd73fd57fdb092c5703c9270796ed22","ssdeep":"","tlshash":"ee312cd8ee305570eec443ffab118988795614bb69328edcf22c83886b8390800288d9","first_seen":"2025-07-08T10:50:27.664088Z","last_seen":"2026-04-21T21:26:35.53135Z","times_seen":523,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/454.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.448Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/e/s/0/454.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/501.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/501.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1553\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Apr 2018 05:48:38 GMT\r\netag: \"91bdfabc58d1d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 11:27:43 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 194277\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=hcLBUJZRnYpLqu.ThWRjhb03UG4wfQUs_ynlout3Bhg-1774113941.613006-1.0.1.1-gxt1u5GZOXlpDafq47NvFeMMk1SWgV.4UDcWKSpeH.2X9rCpgm3wOQXQ6nezV9mnbq.q3KMxXCjfdhDjn1SJ0D1.UUsQgWXdjyqXxfXykYfcnlD5JKdU9K_jU9jfXVek; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j04mOybsf6nkDJkMjlGHccwGbJiL3sa4iDR3tnYNjP24ZRgPGQmQE7PkEeBH1FRfwaPv77tl9ahC4CD%2Fcntz6bkf3To%2BSq2ND9XtPAadvSySW%2FhEFFZBs0ZtoOI%3D\"}]}\r\ncf-ray: 9dfea847088b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"195e42a3ed0da86c469a643f5503d275","sha1":"f397e9c29e76d27a11122ac60780a47366ab8be2","sha256":"38b46854aacc74662d396179b8a5c314b60d439d5371a20225e6cc92b585b89e","sha512":"86ebcbb424eea7834f9691738cd97864463df6f784940b52d5b5048a6c75e1b74c73d93a69c19f4be6435268c71f4302343f97c1a543483ebab98d6bfc69c599","ssdeep":"","tlshash":"d031e8bdb34d5a7dd069239c3724e915ee26327f81110ee2321ca3604338ec94ba9eb1","first_seen":"2024-02-23T14:13:45Z","last_seen":"2026-04-17T19:40:33.965762Z","times_seen":205,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/firebase-messaging-sw.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:32.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /firebase-messaging-sw.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:37:15 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-465\"\r\nage: 2897\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=w.lWzsAVA6XvDHzgwOr5_P4TFotZr5_17GNNU0ScmsM-1774113932.2059622-1.0.1.1-0DUFgdcxEgPxFtFQCM66fTYag68ZvPdRVvkIenzpd06lZyo1JRff6u9Lyzh.4HrgIQ1R6Hay3lo._1e1sJnsZz4sLAOqf9fNJgM9mDuNq_CJodgT_A54JCtNknUsnS7M; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2F4jYapuQSsAFljq5NZYE%2Bm5Vz%2BJSdoSQan0x71%2BofF6IjXoLcPtf7OrmRIsQzoalBRL79Jvs1fvmlDcPFzE422pLawiNR%2BAYSl4SuoUP8iTOhA%3D\"}]}\r\ncf-ray: 9dfea80b0a539cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"44b92a7d10cb0970ced5798c2eb1b8ac","sha1":"819f60615624f025d1256efc408d8e576a909c7b","sha256":"a87215bfd90d96fb55335ce2b2411f38074588149c9e896505cb10b250e17e1e","sha512":"75c55da9e8afbd96b6219292c91fb88e01c15d20bafc974028763227220aa042f4b761895d44b0394baae53c225e9b0c109d2eca333aad6b382951a60448e8fe","ssdeep":"","tlshash":"5121cb124be2f8231e4104c7679f32186e290d2507b0f1de61bf56b86b0a57b206bbc5","first_seen":"2025-12-24T22:39:16.149326Z","last_seen":"2026-04-21T21:26:35.827176Z","times_seen":53,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/GamesOfTheWeek.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/GamesOfTheWeek.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=B_V9HtCF8bPCH9kyBiWtaspsDHdeCvOqgUH5DeVtdjU-1774113939.6379051-1.0.1.1-QO_nQzveFvR5F7EV4QDsWkUIdDSxn2.uWONtTvohCY2LneEDQk8_97MRRlIyfQPPEqKsNHxZYKvwPjBlINtwSEtVgO2AW17zInrZ81tDKD_A7egKV_WDluZdVOoU64c0; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GCz%2FHPfZpRoJfLU3I9pHn888VTtVKOUlQqXI24gBGuFYtofjXwsodFSkPuWHfbPKOVzdwDs5LV11ApWOOUtQFb7MuHRtvxvDjQfj8kadJ9s%2FBdO9iw%3D%3D\"}]}\r\netag: W/\"68627086-be0\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838d87e11c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bd48bcac13b7af9a43338fa39450069c","sha1":"b39e0dce82eec16651566913e7d8a1ae26ee25d8","sha256":"e67476d135f1d3e566d62c017b8a4afa7b3013dc29540a85de3c9f071a11812a","sha512":"39c26cb74b8bea9fd071edc07b5fe1ef144747ebd23593b409aeb8f0e6894daf00a946805f222e2dca66dae48baa4adab0196a4ef71720fd109aeba8f11e1026","ssdeep":"","tlshash":"6951b0d8c5254afa1bcc335e6322542b0cc92fd6f7a35cd8b27c85985b13d062a7e883","first_seen":"2026-02-24T14:23:51.265611Z","last_seen":"2026-04-21T21:26:35.572591Z","times_seen":34,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css?family=Lato:400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Mar 2026 17:25:41 GMT\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ae317c913d9f17e384174fcac1e95f49","sha1":"97048ceeff296795e17fc282e38d26d44fce8bad","sha256":"0250efe84de4fea78b47bed1e3367687b72cbad25fa556879acfd9adf33f6b24","sha512":"3be7c2d8b49c8ecfd8fbe46e0e57aec92fe696894da6243f6b9f0052461f28eaff9b6974068276cde565287efe54a8a16379b21a522dfaaad925fa38215bfcc5","ssdeep":"","tlshash":"ee41ce92096fb908db830cc212c97d32ef0f625064499935afff14d8bca7d699362b0d","first_seen":"2025-09-17T17:57:20.126253Z","last_seen":"2026-04-21T21:26:35.532166Z","times_seen":5655,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":118,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/lodash-kwDFPdct.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:33.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/lodash-kwDFPdct.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:40:40 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-28615\"\r\nage: 2693\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=UpY5_TK5vYsYanDRYGTJDR49FD8MZQhgWoOP38cXs0M-1774113933.4544556-1.0.1.1-czBT5OjLOslZaTKthLUSKvCzMZ2hTeHT.4zGbyCHWczgylBZaXk3qFhogBrFwjnsU4Y_qJ0jjXi1vtm6.5ogRH2SWy_TuES1gYiLCzyMPJpNSnayrVQEtK9h7QNZuTRO; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrK8y2Gt1x%2Fof3PFPDlYBQYtp46qNL19scTFgO0dwbvevji5%2BkUh%2FijPR1%2BKRXN5XbmJ%2BrcOgb4WXWL0yUdzuTPMUL0ZMqa3oaRdzO98DBYTAbs%3D\"}]}\r\ncf-ray: 9dfea8124bb69cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":165397,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35467)","md5":"12e56cd99d8f0069e4ee81a372fe541d","sha1":"44e49f0b5438f713c4e9cf76e3659a00ffd35e87","sha256":"d77e40234c5d8cda5978d85ecd94a77ad1231619bf0b371d67fb2f3074e96425","sha512":"69908919839d062f0d861cf4591600c01193ccc7fd4438009bafeff34258217d381b6581a2142725c495a3a1bdf7937964c90108d0a6fd6e01ce2b90a854e9a2","ssdeep":"1536:RU70QnXcPZMTC7X/7crNuU0OCbgjE3mhgELujQjEO6epU3nddIIBQoMbPDFLufvn:RGc+rh07XgLujGEOtbavkeLkDYlwMh","tlshash":"74f391c835d7f4a183a7287440bf084bf23ead65a84cc550e1aae0dd7db8919c277e6d","first_seen":"2026-03-21T17:26:39.43969Z","last_seen":"2026-03-22T00:40:17.967811Z","times_seen":4,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":570,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/menus/header_menu_751_tur.json","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:38.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /menus/header_menu_751_tur.json HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:25:38 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-3c7e\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Ye.L5vlELg1lFkT8QrOPg06I5O9THUXujmEFD.EvuxE-1774113938.82081-1.0.1.1-ODN8IU7jAzcXYLbr01bPjG97DungwgpWMojdoBPleU4v_ruLklZOdUWA.MQy_jlTxzcaoTeQnecnfHsbDxYvGSVYHIVUFQcan53kSagF_DT6x.aSEticz1eJJICldPQZ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKKmjpJ5smctbAYoGinzRz1%2B1iJuuev0pDzQ7N89aiyiq7QCKzFEzHH1cHwD2Pv97gFN6XH2QFOsKVnGNYf8BGwGbv0Qlu1uMkoDRFgJOASjIZ4%3D\"}]}\r\ncf-ray: 9dfea83449a39cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":15486,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (15458), with no line terminators","md5":"f950052e4f7908e80dab1b18c4d9bc22","sha1":"b207ea46255abcb9d33c6feeade70c839a6f01e6","sha256":"c10a74e63a100f832983312c21a61f14ccb42f3f1c20e035c18222379d817325","sha512":"bafeb511eace49af68577fce7c189f2452847b6c3e1571135ea81e2afbb44f1b442172f29727c85a3f370b0a10986311293a374511dcee70f418678f7bb59612","ssdeep":"384:McwDCO9HzZmN3RpQ6evgsNnNTiAO2Ba3rqpm+x1A7TENAzgO+jKelF:McwDCO9HzZmN3RpQ6AgsNnoAO2Ba3rqj","tlshash":"3e621602f01e5976d3183e007cc76d5b98cd509d6c9d49409d4e8acecbda4af8eca6eb","first_seen":"2026-03-21T17:26:39.441607Z","last_seen":"2026-03-22T00:40:17.799173Z","times_seen":4,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":440,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/withPanelButton-Kc5QyNkV.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/withPanelButton-Kc5QyNkV.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:09 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-441\"\r\nage: 2670\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=EbrLNzdwhWLfxakwAsE8OqYvvw3GFkcKlUpr_V5JnzU-1774113939.482052-1.0.1.1-4pKPeEJ14nVIiOd71ICajM5ip8frlQdGRcVNnFctpFdouUOzrI5xXGNu.DvVXf6n3IqspuCsQkpJUv.BBCLE7y5wxMpJ71WNUQQvR9MjKI01SU2RCs4BJIMuviGRTozo; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROPj%2BGZ5IguOyoPmd4nveeOpAyhfFOueSgS2%2BCorFYSZZS7vw5ra5vyOMexBm0crniMWhuRIC%2Bxy2L1ODcBH8vr3bB8VFXsPrmn6m16AptfN5aY%3D\"}]}\r\ncf-ray: 9dfea8389a2a9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"716c41abf4e6c14cf885b87aeed6613d","sha1":"3284bee4f3fe8a1474c6fd5feb8aa09a3f8725da","sha256":"9a4fbb219ee8354bb94cde371f38b1fee6544c9f2b29d7549e60961847841485","sha512":"58d7ffd4e6f156b5d7b0138ae3a19ac35e0eacf9e1dd19fb3259989a19041331796417a74dfe218105cbc286386470c1cf38477e105107362cac2b0f032ebaa8","ssdeep":"","tlshash":"ee1112e4f5c4a9b2f4c41188577b2cb2759f32d9dce114d031b2c8da5fe8048991e9af","first_seen":"2026-03-21T17:26:39.44375Z","last_seen":"2026-03-22T00:40:17.873544Z","times_seen":4,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/events-CcSKgVKr.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/events-CcSKgVKr.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index.es-DXJtvHoT.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:01 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-17fd\"\r\nage: 2679\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=KoJmI.dGR2_ncrjd1oUjayf7_9Hy.Z1dh2_RnluIsGI-1774113940.2613683-1.0.1.1-StWGE7HyFijjEmD08QaGcksryaUiapY9F6lpXUdAKcAwwoaFHD6e6P6nbQCshhf_tY.VIwaWbJOcOn_QsNQOHYW7rySgthChescKnyPvhF.5sDX7xk3G3fPyOYc42dg4; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YI3o%2FuQ2UNlWCxrQ3Sg5z3kPnzT7nLEqzgOTzxKHpNAqfiRiXjEHTVdjvJXPWG%2Fr8wYE5K%2B0SKn86EQ6hQ44c9LU1a0xLOkoh9v3YFvLFHEtlZU%3D\"}]}\r\ncf-ray: 9dfea83d4b7f9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"6fc0eef96fad08bb59201d62b01a05a3","sha1":"70b77730ce38865b4743bc672d001253ab6f2840","sha256":"a47b119988977abcd7e45234a7b28325876a133c1b5acc203fa7dec725fea22d","sha512":"75496f580eb9eb357e8bbb21a32ac3021a3c8289ec816b96f412047d8ed05915fdb06a40db5af941985f0039d0ff6cdcb2b99f3ca5d222041be0b647caa4c816","ssdeep":"96:0d9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:03IM2sWMtBq6n3PzH","tlshash":"05c143ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9a4126fb8","first_seen":"2026-03-21T17:26:39.445809Z","last_seen":"2026-03-22T00:40:17.797546Z","times_seen":4,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:43.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Mar 2026 17:25:43 GMT\r\nexpires: Sat, 21 Mar 2026 17:25:43 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 154361\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465721,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"c6ecbdd6e5c7c35706e6b7290b4e711a","sha1":"e7504332313b5faba158d3371019ad44fe8949ba","sha256":"1d0520b144e29124777398bb9dfff2ccf5663f45275ceb1c5f70e91dd297ca99","sha512":"ff20dbbf2ee500ce426438f4a1c77da9d52c2138d9c1ad5c54311f0670b7a4ee6202ebd366cb291818dfa5e2964647c945f8d9e5c057d32e12726b2145ec6efe","ssdeep":"6144:V/J8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:Q4RfICAbHm8eeBUX","tlshash":"d8a4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","first_seen":"2026-03-21T17:26:39.447772Z","last_seen":"2026-03-22T00:40:18.112422Z","times_seen":4,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/WagmiConf-B0zYIpvp.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/WagmiConf-B0zYIpvp.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=1774113936460; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:37 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-18a72\"\r\nage: 179\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ZpTBpB0kRqoR2FYZcm3O.3EUzPXY2q7T1Krlrz4laE8-1774113937.206858-1.0.1.1-xNYLTKnag7qZYeoxEqzdsggrZiLaKAEm4ME9QTdcOM7TF9qnVvghY0DbCT1p14LpJi0SU07FEDpllghf2a52xVidxyt1hv3Hov8JWmmABjafNY1XiWMD_6aeO6uIvBrZ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJUUB5TN0oVS36vXyuM%2BysoCoW6Zyy1FiRXgNy3E1DFW9wH9SqxxbCpnTIPrOBQY7o9epY342Vn6sAsJMR3pqRNfUg6iN94plrh%2Fn685HqqPbS4%3D\"}]}\r\ncf-ray: 9dfea826ff4c9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":100978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48214)","md5":"9ffc7f8013321c1fcfc6d9055babc05f","sha1":"f2b3ff148c33a75074e577fe689c3a7e07791157","sha256":"233f2d1fe68f5aef052bc5e2ef81a7663782ade365249e40d628f8f1c6e82879","sha512":"1ac7b4df1da940a29ab80541089861f322f6edeb46925d8c5075b01c66e5dd4dcb39349ba4814f5262b6934b7afe14b68d172595066334dd94364782af886a51","ssdeep":"1536:892Caz/SCdwD7ZajZlO7jMMDWOx6uxG7k8UhVxSuS7XUF3waGBfGYBgEytq2bPYE:hCaSlx5xG7NU+WEy1bPjv1K/XGd","tlshash":"67a34ad07196b46103a74ae008bf440bf139ac34200e565cf269ecde79b96ea9277f7d","first_seen":"2026-03-21T17:26:39.449607Z","last_seen":"2026-03-22T00:40:18.116093Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":918,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/SliderMarket-D-md2TM1.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/SliderMarket-D-md2TM1.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:25 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-502\"\r\nage: 2655\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=F9nQVNY.r.eKStMdEPPTypyidhrSiTVllu3qN7zmvpA-1774113941.0685093-1.0.1.1-qL4nj6IM02JF62sf1XX0uzIf_5e4U0ESrD8MfkDsnYvuOeO6xG82V_kxBASMb5C1wWcfSG1dJIQq0vVdENUTR2ZnfYEGn69k3cQ4iCQv2gnqiBvJOxgeVt.LdOs.ZOK8; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1YjjPPcGru2TZpq5yhO%2BkTdM%2FODw0xm%2Fh6L3S8FiZAyDAPQ%2FN6L0kOP9tooGIUG%2BFT97kC5wvOgUrXytvIBfES6jN98nIp0tP3Hq2BZVU%2BwuSA%3D\"}]}\r\ncf-ray: 9dfea83fabe89cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1282,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1281)","md5":"32d5d2bcf811f8d4c6b3a3871683304a","sha1":"b6ea75c35f6dbf3af65fa63667aceddb2f465e11","sha256":"eab3a50aec4e7691d32944dde37807869bc419ec8e7bed97f48c59acb0d85d60","sha512":"58163a7ecf99035db9755cb25ac4cbd82340113e82d909b582607517919cb9123bc734e6a0c7d0330e86cb9d1982b3f6ca7c1307bcf5d40eccbdc98a000a3f82","ssdeep":"","tlshash":"82211059e530e6b837668ccdc134172231351aa39bb4e2c1e06fcb111b38245b35fb26","first_seen":"2026-03-21T17:26:39.451705Z","last_seen":"2026-03-22T00:40:17.815239Z","times_seen":4,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/391.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.440Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/e/s/0/391.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_0c89eafa1fbe108a67b08009c9857d1f.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:42.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_0c89eafa1fbe108a67b08009c9857d1f.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D; _ga_MCEY36CK22=GS2.1.s1774113941$o1$g0$t1774113941$j60$l0$h0; _ga=GA1.1.1652025929.1774113942\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 159322\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 11:29:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69bbde36-26e5a\"\r\nexpires: Sat, 28 Mar 2026 14:35:58 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 10184\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=_TdniuUT8t3M_vqIM4bdilRl6Ku2oNGS6hMJHKbb86g-1774113942.383203-1.0.1.1-4vPTCsuXln_mj8EjD3k620atss4oWiFMPk2Zet_.kGa1YHQRxq5sC_4mDQI2rpadxTJdC0EcF4S_s0ASBVNIGGC_Fz30hxA_5R5vjhfSVCZyUkq8QA6ukJ.cM3JlauDR; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTVe6HGUGR0HHcx5W1v%2FU7BfEvbTkS1Jwu33pAFNQlHtbbUMZ8iu7rJar6z7ATOYObeQ2DLG%2Bq1q3qX3opboSGy2BOzvfiteBqSUtTvqUmTtGmOa7w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea84a3ea29cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":159322,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"be08cbac45a16c1e1f9a62eb5279e612","sha1":"4473945d2f43756f58ab31e95f170109226c4ea3","sha256":"30fe345879b06a35bcaa0fc05effed868c151f8817465b38577041962e65fa1e","sha512":"8c7b8a176e8fc496e5a89a32420a4d08acbe28378c53a62e074f2bbf33d291978834778e4559904a5e05b39e84f454b0b2798a66e81635efc6e3145ea5ebc368","ssdeep":"3072:2+ha+m7tQBjehg0RQ567AeGyAfyrZPZ5sjpffsZzMZspE:2P+m7tQ5IhQ5SEyAyrZRk8zKx","tlshash":"39f3120ef96a87da7e597adc0eb13ec63a0c57a380a045e9549fd45b4cc57f327220e1","first_seen":"2026-03-21T17:26:39.453347Z","last_seen":"2026-03-22T00:40:17.828488Z","times_seen":4,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:35.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 177\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":177,"data":"{\"p\":\"67a3e7473a842732607a39b8\",\"w\":\"1ijc3usee\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://galebet1065.com/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"VuseDNgSfFBpmz9BOPkOg\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-9bmt\r\naccess-control-allow-origin: https://galebet1065.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9dfea81e98331525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1037,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e51f71cef414a05482493c888e770afe","sha1":"2f92cf1a1411e650be53787b4f17d1f052d4e182","sha256":"b7a8cb737bbcd893a1fc57864c5754bac3ed5f257314961a63858e0a5054de84","sha512":"63571030d8553f16d154cb00d64b91059ebc9c8f1be0a2a2c5af3b2711feff333546caa85c33cb3ba6db22463ab0e75cae1573971b264af4c214a8ef34f204e6","ssdeep":"","tlshash":"731175510d491e59a6b2f94549052dd523ceeba374d80869a092cd0c6d9427e76c2876","first_seen":"2026-03-21T17:26:39.455152Z","last_seen":"2026-03-21T17:26:39.455152Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1608,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1579,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 732064\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea82948bd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5504,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-04-22T00:02:58.101993Z","times_seen":28460,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/Mobile.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/Mobile.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=otafDCGPhWSUxf1J4TI2GnLU9jZTymxYMlgeA8n8jOc-1774113939.7138057-1.0.1.1-iNxgMo7xndfIyh4clmN5d3vXH7OBsHfl39phY.Jn4GavspX41973Gv0cciB6QIxAQpxyx9ercy2AnYODwZitWBFFE4nrTzL37D.aqCVT2wyVCkGY4rsENUyvpWACYT4d; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=USNXLKC4zED8Fch6%2FIO76bRBKYQPxRgSsBY5gCONKtvKsvpm6C8kdFzcQ0ZU3NhA5sg%2FDFQ9DOP8I8fqCpxEX1dtKWqlwaxemPZAZddR5vULa%2BrTyA%3D%3D\"}]}\r\netag: W/\"68627114-155\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838e8d411c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":341,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b140aef15c3a0e2328970dbf675bda24","sha1":"77f0fce91e82379b75340bef8bcf39509d1c55eb","sha256":"08c2a0b66d7c329ce1e9e957188e98e920311984544c6d824a29cb8c73d668c0","sha512":"06c19a313efcafa154900f41bd864dc6bc5764a82dfaee82c91ec6fb360d61e0da1a1bb8fa6c58dd8a14f6cde01b85fe25e0ab56a9ba3009f4be67f99eb1ddd5","ssdeep":"","tlshash":"dde078e5b250d40ab5557d53b3fcd5a35e69f0d1da940c39713e791e0fa3034128d14d","first_seen":"2025-10-24T05:32:28.297874Z","last_seen":"2026-04-21T21:26:35.737553Z","times_seen":38,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/NotificationsButton-CmZ_pc7F.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/NotificationsButton-CmZ_pc7F.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:09 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-22e\"\r\nage: 2670\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=fteYjuGv_6WsFndk.7xt3MLAQCNlvJgzqzuYS7.5p3E-1774113939.583129-1.0.1.1-F3Wlsrvyor2brz3bGOjF9wKwEcsi029zolPv1EaTtF6vkLTSCxFJUxGFGzcOH5NiBz1FdVvCO79tuC5Nol1NJgZmALtTEWkSYz6Ck0lPMjJF6lhozlfyn_u8RT0oxerK; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RqGVlPh%2Bq4mIhDz%2Fx4WXzcRCBJxXC4wXpGibEevxo4NMbagUJXGztEyhGOtdo3mS%2BVzVX%2FdMOcCb1XEDOzjQjXIcdmNmXNQ%2B2yHEYAr%2B8gMz6zQ%3D\"}]}\r\ncf-ray: 9dfea8388a299cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":558,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"051a83a76a17decaf79265acca3f4d57","sha1":"d7f6e37bd318580a705e97bafe6423fe59fedac6","sha256":"186e8d40128d0573379363a0f0541a546388b54f525b6da47c408f57ad8e6e95","sha512":"6b0ddf6b7e7971ef86cdc5fb4c880491532c8a50a561a398cd175d41daf7e7f72004b6a1d78fbd661d7c5c863a75f3b3f8e5e49614ea62b6436468192bb44d08","ssdeep":"","tlshash":"95f0204beaa8d4b41bc39e70633b8426383a7c2cee4a948000a62c55177015ac54fe8f","first_seen":"2026-03-21T17:26:39.459535Z","last_seen":"2026-03-22T00:40:17.889441Z","times_seen":4,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_f00ad00088322c3724f224ea083d15cc.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_f00ad00088322c3724f224ea083d15cc.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24390\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 14:03:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6940151d-5f46\"\r\nexpires: Sat, 28 Mar 2026 14:43:42 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 9719\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=fYjcorZNRKBtknKqqZRx1jSVDT9DeB7uq1x.gII_zd8-1774113941.5191777-1.0.1.1-klp9X.Wlzd2Cqp6PC6HPOuIyC7TArY8Oyd2MY5AfAk2x8Pf_HtmOc2qqX.AotSx0_VM2CEdoZwT.yGuPsLzl5fXpKya.uUrgklp_x12JAc5bP5VSYeduace0XRxgCeNE; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lrnvB8eAYobzlRVFZSsKPZQfZLD1aRGLoYu0dt3NgOJ%2FaGWtSJuNwElTydlSSfraBZsYDKdQMNObKiItg6LO%2FxBNQV%2FjiOJZUJWPML8pWffg28Mdeg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8451d459cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10a343e21bbc8dd82b9a351018ae46fe","sha1":"ea31b5994a6dbc5e2c49d5f6eeaeb1c6b16df3f4","sha256":"08550d26480f3f6cf58fb6b50ba9c247d35c1eba70b6f2ca467abec7c84a19e8","sha512":"7c2cd2364f94f5a82d27ea07f251eabd2b42a03d1e2ddcb671abb80b897803941c05d8d3e2910c5fcc9844d5fb0e608c6b2063f1bf7c932bcd501efc709f5921","ssdeep":"384:lKjKORGzizM3XqK4PhCDkQcL5F0cqx1/v+zgxjfTE/a7PPY+xbyWBuPcCgfLdC:lQ1GzQM39QEkPF0cSN2zWjfTIfKjBe5x","tlshash":"5eb2e089da8861645c84f4483f4e24d7bb7816dcebaf083e978d0ee835c99b577b610c","first_seen":"2025-12-24T22:39:16.06566Z","last_seen":"2026-04-21T21:26:35.831774Z","times_seen":40,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/15/30769.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/15/30769.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1680\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Jun 2018 07:09:18 GMT\r\netag: \"109f9d1e9cfcd31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 19:10:45 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 166496\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Hkd.dxCRp0n8VyGT_bU80dwmSs2n3CoUKkOB1GNRJWI-1774113941.6142352-1.0.1.1-T3otXPCNsGK1SyBxZfR7PPu0DTiEgoO7xG8NPnuc6HqcItxfZG5EKyxOUPYBkkqL1lUaWZNiIP8R9MMKCWivHKA7UQHaAOtR961MinnFAzuuTo_JVbBSwtU17.Q2dsYY; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IpKbk1sQgG8f2HR2AvMhfj1cGdGKTC6tRV0sS0kpUTWZRljRjkoZ7cxA5j7ggPybqw6wV%2BWKS0p3H3WXn%2FwaRveSkGerzUEh2WHuRzcE469JvFPnaGt15gNQkyM%3D\"}]}\r\ncf-ray: 9dfea84708995a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"6e8003648fc896775a5be3a5d6ca5cde","sha1":"63136a64e856eaab11503b8968b48b303493d564","sha256":"d348cf161211ff3f896b37fc21f037ed8e637c5a69b5ea84c30a1f33add5beb6","sha512":"8f8803fa6baacd3f753ca156f856cb2702dbb3d0b21d5820ef7f08bb7201567b96a4f6cdbc499ec1d57f5daaba95ed415a512f28119dcef4c3c78849e1cb11dc","ssdeep":"","tlshash":"8831d8857ddabf25d0df0866c39194a120d91bf75c29402fd9f8f4eb531420a6126dfa","first_seen":"2025-08-25T06:03:30.837155Z","last_seen":"2026-04-21T21:26:35.590066Z","times_seen":18,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/395.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/395.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1660\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 07:25:33 GMT\r\netag: \"7236d817296dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 19:10:45 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 166496\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=6ztHLcw2hC4FW378HcCvgpFwS2BfqK9t0Xl3zf0r1k8-1774113941.6141393-1.0.1.1-Mb_fmL58cUxUhpdpcxF5wCEVHNfmSn8nuAlU.dwvzs2kbybMvB769WxEJMgdlp3LADLuNK.g2j_vSOV.2maDlZRwpe0FUPW2Nq7RHa7s4gTzFH1SYY643KzljDeZ0n12; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FC3Y7hL45njbs6ofKpGiahhGAOeM7RqaTLe3cThv2kzjn6l%2BPiFZyYtnHp0Mq4PDeSYZkGxFzkR4PGQYb5QFT9yFQOna%2BnubAzHl%2BBAGBkh0WDpOIEfIYk0Z5cY%3D\"}]}\r\ncf-ray: 9dfea84708955a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f4a3b310319ed2ae5f85de6f9259caed","sha1":"f0401b7ba86e03deee5260b17fadc26036e4fb6b","sha256":"42ab1bfd61a2009272bbad6a2f59f7c17f5043e4345eb73ac93fede514f06aba","sha512":"a507f234ed64a600dabcb1f9d1db6e6d7e956150db2e850bffc3569d23ea31dd7beffc293aefafffa8081660f0828c7466a0d809066cd1b5db548b3360801cb6","ssdeep":"","tlshash":"1831f8e57c64d1fffe0e39a3a81c43c6d3735b9a99a28b569e70c8f5506d4885312431","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-04-19T13:12:16.88774Z","times_seen":512,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/464.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/464.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1598\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Jul 2023 07:49:11 GMT\r\netag: \"1fe73586f0abd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 13:50:10 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 12931\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=8QvxrRNnLpA1SflgJowKWRqzcgwxfEutMo3lf1r7QnI-1774113941.6159215-1.0.1.1-x7cFjE_CvgtL0YIKpgHvGMb_n5mXuBfCFyQanZlO5s4cRSKxcAcULpTJFwoctfpmpCLACaypr9aoOMAkTdo7o8u9hSzxYI0JdfdQ6JNRdRFkGLdCFKEMP1Uazgzlhg2d; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJm6aQop4BO1vCWZhKn4UpCIPUIP35IgJip7PAX2%2FFvxb1b1ssqcAOKtLY1aBAAzLSxoNTgk0fKU41vY%2FsiZCQKowKKLCLbxpP2Uej6Y%2BjzUoyxgele%2FR2VYVv4%3D\"}]}\r\ncf-ray: 9dfea84718ab5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1598,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"e4811b8c778f8ee9a654888507a880fd","sha1":"017c49e94f77165d2c32b6f7a0351c04d558d530","sha256":"0f788fd3a70375b273176580d1be4b81cd67eb7d56554c8b3b7472b80b409d08","sha512":"8d1464a411b5ff0c7e20bf895d03208df49430f6323dae25c72aac6093a58d819d0ce9c718d0dff3c5d47dc7ce87cd4c4d22e0c4dc00218a164c9b117f8b7b05","ssdeep":"","tlshash":"df310ac8fcb4a349a0241366c66ba0142424589d4adefb0ecdb6a8654b8df84fc33444","first_seen":"2023-10-14T20:01:15Z","last_seen":"2026-04-19T13:12:16.933863Z","times_seen":217,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.21btcoservice.com/?type=json","fqdn":"geoapi.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:35.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6l5eTJy5Ivh4fXRSm0TIfhDLp8SNYtKUvdV2mR5yYSUfleXvX9e1r0oMIC5rR3FgEmWVT1TLIJ18Oo%2FtHKF6ycgnBj5SVvJTzSiMRh%2BEYTp%2Brw9bU4t%2BwQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=AKelOgj0ZCp0xd1IbEtkd05b2O.rjLJ_mO8ayQyg8zM-1774113935.4486392-1.0.1.1-IXJ_L5aDxQHXtKl57pRwKjIFjLmFCxZXdJUb6CFKDhpxpX9TCmu14JmASr2c9W2Y_h3jfEfQmjk1G6v5YRze5VEnPjnG84R6vqZtbI7x1MNZgmDwSosUns4adZNIalec; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:35 GMT\r\ncontent-encoding: br\r\ncf-ray: 9dfea8208f125a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-04-21T21:26:35.620659Z","times_seen":130,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":95,"dns":74,"connect":1,"send":0,"wait":131,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FavoriteGamesButton-CYfYTrLX.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-CYfYTrLX.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:09 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1ab\"\r\nage: 2670\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=pxx62FWWAJZwEmoOG6iNYjaLvXWM6.VoW1aTIBQYnvA-1774113939.4983394-1.0.1.1-H0Hh04Zql.W67s67JFYEosO5IZTiI1mP8ff8hKetetkn4r0UEFd0jo2qtWDj4aqTURihCrUyYvqC5ljORL1axII7YPMMX5hGvxGBxlqOTru6pRJYUui7RrQuK54Ba5pF; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3t69oKtFdQZaDZuzU4jwTXwCp7OqlWz4Mc6dDaYMPKS6oJlYTaafmMwU7TAkOq1YCqfdvdp8tAZiiP1ZKZVaPh5p8GjeELPxUO7kcXZu0QUzWI%3D\"}]}\r\ncf-ray: 9dfea8389a2c9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"4a565c8afa2e2ec3fb7c9744f2b8c63a","sha1":"41e7243f94d4d2ec8d2f5f0c53ec8478d6bf07f3","sha256":"9097c3310dd046a510dd2fdc578c8d96061c1b1c8cfd91725c61b39b36574553","sha512":"52e6ec9255825251f43fec7a6e3dce10e459c123e1449d847e14f3b4e386293dbfefc4d5e586497b58e2a205d36e2a590b29af027ae89fb33fcf4e89788d5847","ssdeep":"","tlshash":"02e0fa0bd059d1fa2b436fd01107c8243436b47cf79cd090408918503d70597c54ed6f","first_seen":"2026-03-21T17:26:39.361872Z","last_seen":"2026-03-22T00:40:18.081875Z","times_seen":4,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/LiveChatInc-BwBeRgTB.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/LiveChatInc-BwBeRgTB.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:15 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-b68\"\r\nage: 2664\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=6yoAUAt2OAPp_ueHIvy5yG7O08VTSYjcHwROi2qYOl8-1774113940.0614405-1.0.1.1-kYGEt3TYQFzzm471m5nsaB6h54Ne6R6qeDNwaUfTS69.3YQiL7ZkOokDdVw6YDPOvJ4LG7AXX4A.M5v4jyUy.lOz_98AxqYCTi15PkzUjGBPPmG1IXfXfTEOM6pT_KuA; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ywqxBfDXBd%2FSjTmgsj3FuQlL%2BVjgeqr1z9TAx3iEVaKpccW7vfdav6ISdu8SrRa7O5mLr61aXM5bPI339%2Fofa6GWC2Tz%2BcmJ6EJqG%2FVLEb7qTlI%3D\"}]}\r\ncf-ray: 9dfea838fa629cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"ad95729555f741c465445ebf3651cf28","sha1":"35cd25bbac874733d0a3858af8b224eef62c8201","sha256":"50bdec45d97816d59745395248bc7435f2d1da33aa11b764e9f933c1f4d5c4ba","sha512":"79a4e2988c4d3515744af4888469b744d228f5affdaeb7716bce28e24fd9e26cbbfe20cb40095ddc128d26f953b50616470237d22bd98d2131830798ed737955","ssdeep":"","tlshash":"e95124dec43cb4b192ae67d1323f7b5f71165b1aa4048d31656c4f0af62a0cbc467aca","first_seen":"2026-03-21T17:26:39.425495Z","last_seen":"2026-03-22T00:40:18.011274Z","times_seen":4,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_e19990b5e1c3054288e6938d2098165d.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_e19990b5e1c3054288e6938d2098165d.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42238\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Mar 2026 17:43:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69b1a9dd-a4fe\"\r\nexpires: Sat, 28 Mar 2026 14:35:57 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 10182\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=B09Q27PPy_9MuxTAyciVDLxYUOHcgrFmQEn6jUGnNkI-1774113940.621982-1.0.1.1-gxAQF3WPNj5jNDTXB4vX4w.fd4NYfI6U3AT6kRhWUEfj6KMX1WNEhmIIRzd2DwZzQ8Hn6VzsRKNquHnDvhz4XBxj47_eFEtV17TlhSJHhttNKBIRZA_C7.Q6ooSJwn1c; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJGM7gxkypdQWow61eCe9G1ESaUuTRrVtlEsu8%2BXSP6C4it6fZ599xpU5zuQFLPobozQzwKH6CENKH%2B4IiTpWwjgN%2BE7yXShDBsF2PwGs6vqcXKLRQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83f5bd79cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":42238,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9be1940284dc8dc963a68e1fd91dfc51","sha1":"4954435a9ed7e84d2f7839942c382d04a5bd5a08","sha256":"fefa31d669655406b041ebbbfa82b1f836f69b2ef7971182f1f2a0622ecd92d1","sha512":"b0e0fd9b3a3dac2c03506a4e74b0ce96c74dc74266b26adf93e5ac35cc8ab7484b6c05fb2e2eac5c755f38b5f9c68ea8d081095be752bbe7cd57576cba9c0cb4","ssdeep":"768:uOAPWeqHilLoMWJXZQR/oHMlljTAfdmkyz+nkPH2j/sj16fQr19:uOY+HilEMWJpCosXjEd9ymkfQm1XrT","tlshash":"0113f16f3d536584c3f27a9ecdef8a459900b447172a0eb5d7678181b3e8251caf0e2b","first_seen":"2026-03-11T22:22:08.419451Z","last_seen":"2026-03-21T17:26:39.469108Z","times_seen":3,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":385,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/SliderMarket-D-md2TM1.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/SliderMarket-D-md2TM1.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:25 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-502\"\r\nage: 2655\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=8XxVrArLAmoeOgE_5MtzuR0JJ44G.ywy6OVQjUdljuI-1774113940.730782-1.0.1.1-aK5DVLJTncdz4afCQQia6jUkqw14F5LyCSQgXVnfSacYDa5GdtOZw5kwuLSRB9x7DmShDGg56oTxQca4jkdb9Mfm1.zwJAuuORA5Ob8GyFTVNzF6nvJ8atg3NcwILDVY; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sG83ywYR6Wl%2FEia45di2hHdUEZnWbLcFfZgAm%2FCdSDIXbNh3bSA5Cq39ncaCIIdGWH1CQEfED91x4G65lTy1nUhbzvgM5pl%2FvSTsKGPpz3TxFrA%3D\"}]}\r\ncf-ray: 9dfea83fabe69cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1282,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1281)","md5":"32d5d2bcf811f8d4c6b3a3871683304a","sha1":"b6ea75c35f6dbf3af65fa63667aceddb2f465e11","sha256":"eab3a50aec4e7691d32944dde37807869bc419ec8e7bed97f48c59acb0d85d60","sha512":"58163a7ecf99035db9755cb25ac4cbd82340113e82d909b582607517919cb9123bc734e6a0c7d0330e86cb9d1982b3f6ca7c1307bcf5d40eccbdc98a000a3f82","ssdeep":"","tlshash":"82211059e530e6b837668ccdc134172231351aa39bb4e2c1e06fcb111b38245b35fb26","first_seen":"2026-03-21T17:26:39.451705Z","last_seen":"2026-03-22T00:40:17.815239Z","times_seen":4,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/useJackpot-BDZnzus2.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/useJackpot-BDZnzus2.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:19 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-58b\"\r\nage: 2661\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=FOVwdpZjXBlTirbwMN4FU8Tz9zNowNoAnZjyvc8uno8-1774113940.8551126-1.0.1.1-e4k9ysSa5JPrnN8XXaO7QYvsvBnGD3tB531A7r7mmmUEDEZ4y66y2rN5QtFdq7j84M1O3WyGz_X5C8MvKrYDoynowlkRpj2bT5Dh004TsWSJl1lkFYOCiG7KFLmU9pvK; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cgYj%2BF9PueQlBwEK%2FyqI6lYeXuD%2FtD%2BZcKNbpVzc87tEwaTDA%2FVKGca9CZXnOUBxuDlqOeMjbTmz22GQJVNd%2FcSG1OBN1op3EB6IEAE0HbhbMQ%3D\"}]}\r\ncf-ray: 9dfea840cc199cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1418)","md5":"b91eb26317c6780c283223b75661a38d","sha1":"a0914abf4e0d8af2b94ce95c878e0a49ea138cdb","sha256":"0c253d85994a8748550577e8079833492bdfd33a1b82fa7314770e22f81bc51e","sha512":"410c33c726832bb0286d9a569b16e16b35697721b3de1c84f4ed5c67e60a40e5671c281a1a57639c6341c438efc5477beb869b37b08a8f69748cb66dd2830bde","ssdeep":"","tlshash":"46211045c069e5f8f48d8cb10177cb2a1b3c3f7a7440e0a0a0ba5ebd57a8d41b6a0f92","first_seen":"2026-03-21T17:26:39.469762Z","last_seen":"2026-03-22T00:40:17.938534Z","times_seen":4,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2472\r\ncf-ray: 9dfea8439c1eb28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfSFghIByqO-qpSeiAGASfCVErfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=17+5 c=0+4 v=2025.5.1 l=2472 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9bbc32ce28fd80253987f2e1f0be287","sha1":"ac50a6c9aaaa9a3fd32f610e9858fecee25be6dc","sha256":"9b9632ed8ef4f6d25483053b956d22184ee488efd3f8c22e0ef2626b974475cd","sha512":"5863d7231d17d3edf58896ef5332bb631d9a5c27d06fb934be7653a6847b8918e92ccb66090e97c8b96f5bd51b3c9ae112d2c4eb9407cfe8f617da98ea3d3dd0","ssdeep":"","tlshash":"f8513b2e28bac5e8bedcb4ce2f90883a3283b7511ad4c45552d80854e35fb41a1db0d8","first_seen":"2025-03-01T08:57:15.902828Z","last_seen":"2026-04-21T23:36:13.381469Z","times_seen":2476,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/GoogleTagManagerTracking-DAQdr4EP.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/GoogleTagManagerTracking-DAQdr4EP.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:15 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-4a35\"\r\nage: 2664\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=vjgvozA71MIEavxRsm3fR7Hpakbs7BmPsPRsAyGgpm4-1774113939.5953069-1.0.1.1-BTWv3CbccPGx2QzLELzQZN4i7UFUz3wuuadz5jpTCtI0H2HewybizPR40ieZ83Ii64NO3Njt2O.sXSHlaetNX08QfkvKYzZxBk3dROQuDQT6PLY4rL73IyStNGGtBWgP; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cy0XRY56KS5uEleXTO0y6s095CabAS5QK0I9O2M%2Fx%2B3Qc%2BeFt0T9nywo3Z61z1BS7DQMHQ9PmX%2BwKNJ7M3joM7FpPaLRZveRmSvANhCsJU3Dm1U%3D\"}]}\r\ncf-ray: 9dfea838da499cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18997,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17701)","md5":"1851f665ed369b09c168336a0dfc7620","sha1":"56104bf45809c75b4adc2c608aefe6cf8b84bbb6","sha256":"278a0f52fbce8ceed2a9b0a736b6ad7b2d4229c55e7546093d62a9a550d265a6","sha512":"6c441232aeb4d969ce40dd487a293f6a0efd543b5a5f92bb46af589c9487f433f660a280888d7fa139778497f08bfe7af278653166345a79197242731ceca54d","ssdeep":"384:db3bEI5wTlaZdtdoNc5GRU52iWD+FOTVKWZxxqyuQPfg1F0TQOmJNw9vU6:l3bEeSEDdoNcwiAiWqFOTVJZnqyuQPwU","tlshash":"6182b9d7f96548e0a5bc1fe81f92428b35b1b669f48140747c9e7c0c233cc4ef2a5a99","first_seen":"2026-03-21T17:26:39.471571Z","last_seen":"2026-03-22T00:40:17.99841Z","times_seen":4,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/getLiveGameAdditionalInfo-B63DAlG1.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/getLiveGameAdditionalInfo-B63DAlG1.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-47e\"\r\nage: 2656\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=VHJ1GzSk5kr2RgKqE8XvKTT5lEvEBWuakB4I7ULF8qc-1774113940.069578-1.0.1.1-PoM4UNiZPqia9Wbtm35qzJ.2N9f1m4IOQGKnGcys2nU66QSbZqW90ultrNWAMeMmM607YH2RFIc5MR_81FsVsbUrRCL0ZFo_WBww_oyR74vQw06k_S3Dgbmf_TArs.SN; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xM4mZT5Fyd0CRjzJQgd%2BfiAXu2pCaSX%2BTH9W2kM83sXffphqnYrYXdaIAcF%2BdZ16wKg%2FBkU6l8OwCZNalgudqCfrU8kaG4maS394eU%2FCYBXc3DY%3D\"}]}\r\ncf-ray: 9dfea83b0afa9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1148)","md5":"81ebe665808459b6972bd41e409d2812","sha1":"aaeb597dde98ffa62584343db6067d94ead9998f","sha256":"7009459d3d46221c69360e4b75900b5915e58f769e93042ce6517ee95c856afb","sha512":"5fa482fc2763c005e76333b79999e5a4115fdd63a3472b1328c7700eff2291336c84f4f12715b6a0f2f91faa6ee1fb363bfe313b6edc5ec36ca16740d5b12acd","ssdeep":"","tlshash":"c72114b6707e92bba5d94d9457b01b31e2b5ba05384485ccbb3cc91918774c4a7e203d","first_seen":"2026-03-21T17:26:39.478099Z","last_seen":"2026-03-22T00:40:17.778154Z","times_seen":4,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/882.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.495Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/e/s/0/882.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/1402.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/1402.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1143\r\nserver: cloudflare\r\nlast-modified: Fri, 01 Jun 2018 13:30:22 GMT\r\netag: \"7b1246b1acf9d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 19:10:45 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 166496\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=wdXwMrPHKePWA3zBVvPPC6gNHTHWiu5.kvrodYp9Gow-1774113941.6124392-1.0.1.1-qwQQ_hi1ooUhn15aGAubNnuAzx_w4PuB8Ua4o2LgDaDQ.y8eGx2dEFsdAVYyeTePhAGGdbwJpcK4yHVVCBi.w.PfNJaKxZ5vZS0mFWjFaARmMjOnksaQc9GzH.9WhQFM; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4o%2BjwLKrZNoJu5pBVBHa33FBoFseMWwoWOcsp3rq5Wq6wBZyOBW7a6Yz6WrF1eiaI5OA7oIF9YhsZDjwjwirIAXLxgVJNMJ951m3IW4vBN%2FyAnQ0jiYqAwikHc%3D\"}]}\r\ncf-ray: 9dfea84708855a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f1a8d6d098d7eac2131d812b97ec8fdb","sha1":"638eb56089752f1bb7801bf7a2e897c7dbc34a88","sha256":"47ab1b28d8ec34148d10a594557749fc2afed5d958bfd21df08b63efd721047d","sha512":"2d25af93bcca2d8d3a03879ff9f5bf899dee1d8bf656fa7cc3f93b684ccc76fdb12e49493fc22bf1443cb02b55e84fea7fc5c2755875ba3c40f7bb06e6c66eb5","ssdeep":"","tlshash":"4121c6867e5f7a3fc5da9c0cd759619982a1963922785c417e38822b7a60fe31d0ba20","first_seen":"2024-08-20T11:24:22.444497Z","last_seen":"2026-04-21T21:26:35.799588Z","times_seen":34,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/664.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/664.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1329\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Apr 2016 13:56:35 GMT\r\netag: \"e1364ff3679dd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 19 Apr 2026 09:58:04 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 113257\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=YhHSE9TfI9LpkWEn1s49n0lqr5PqTgUuwAwXGSH3p_g-1774113941.6146076-1.0.1.1-kDdbJbWyaLOLrFO38_D4gQkcyUsljBjXk_lgCwC6B0ZPdnSl5vqQnVaWkXVS6ROVN031kJ6hcWdq.12pvckvCa986cynBpBleG9XERUg_8mXRz7Y8X23x4DsGX_A2yFs; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VrIkdRgqHGNagY1F3na4fzivtBny2zrUbaNNTTdLnKBivSRhljwjdsVLgSmz84eOLNrM%2F0Ts7%2B%2FeJRXWZXYq2Kw4FXbuQ05gc9PznD1d0UHZzZfvILj%2Fq21MR8%3D\"}]}\r\ncf-ray: 9dfea847089d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1329,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"74db2e42cb8124c8c22ffb5409ea7c0e","sha1":"cab53c53101cfed472bd694b38f708c80ec9dd07","sha256":"4744341a97e4615d2f7fe638411aae8790a71d2bf917d7618dd688511d978206","sha512":"dbdee633b8c55185fa3fc40d38ddf2aa9722ffe890d1ada35f49a076415a4ab50c507a05d030307f7f188d8f836e3b64d1b35d9920033d3a29f8f9b8f395e4c2","ssdeep":"","tlshash":"f421b6e770c7a9ddcfc7bc4bdaa21805e84409f738e1c4e7b9958d95b13b5e219021a2","first_seen":"2025-03-03T03:14:57.901762Z","last_seen":"2026-04-21T21:26:35.778055Z","times_seen":139,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 902368\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea829e8cc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-04-22T00:02:58.097929Z","times_seen":29006,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/Sports.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/Sports.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=dLo247G9k9OgBUAM0cuOo9HsFb4XVcMvu.gOUGTeNAo-1774113939.6665928-1.0.1.1-0dg9RUxFJVQQ0tu4n6sa9gWY5XsU4i61ZlYWM_kQimIDhJBoDUPpHE0YPCl80LfZQn5OwasD_7dE1avrffiLMOFm899wavo_VBfHi4yJgDvdfsL8KP7LDnj9RXCSvUgk; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HbbVjW4sXLnGl%2FOmEHHITGWTKAKrfboVRjfU6ULtlKTHrqalR3S7cxIUNWch5Byr6FdY%2BHGpG8feMJkGTRkcvxKn9Ew1HHM7Cif5XKoahKYqZ9E9UA%3D%3D\"}]}\r\netag: W/\"686657a7-82e\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838f8e811c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2094,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e98bc5be7f5882a72abf78d11dda926a","sha1":"d835544d895a4817c210e575a6a99e08c1e2f095","sha256":"bc7880489b92bad21b9475577a93515e928dbc3fe62bf09e014e973e124ed223","sha512":"966b29438ae513d771a33e04b1f0566a70d205ee6698d6b2c7f1b00c7e263311652d392fc3f4251256866bbc2b0abf0dfa35698aaef8bc160847938a33a8a184","ssdeep":"","tlshash":"3d410018c3b983facc45823c5035a5b83a4e10ffa8a0f3b4996e95a47a420dc95cd6ed","first_seen":"2025-10-24T05:32:28.392126Z","last_seen":"2026-04-21T21:26:35.661694Z","times_seen":36,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":111,"dns":38,"connect":12,"send":0,"wait":468,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/Popular.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/Popular.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=R0nycByIPvLenUipB21LYyS852cMupOgI4op._4uhxI-1774113939.697343-1.0.1.1-93Qf3fgHijj.VjdgBDY41t75ovZggpt8jafmE8VVWtTSCbbPwOgpfD64SDixo0BvdbqhiAzPplsZTuX_1OMU.t9g.TCixBArCAWhATLgF8IXc56frKA63_kmkITanh0D; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Ek8l08vuihlQpRe%2FPRVqmqbBx%2BrBil3YPv68CjtdrEUMOAznIi7KbclBsQlbk97iESmBErLF9FsIDmnX2ldFma9j5LBLt9qMW1y7ui%2BH3txfnA3Jg%3D%3D\"}]}\r\netag: W/\"6862713b-6b3\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838c87511c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1715,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c5f467071e8144988f2ffda2539a7fc1","sha1":"8a2e6953f7f16e38d2c4fa1273ddc217cd623d5f","sha256":"c8979e47d3d8b0c74956b41914c9b7628b362e6013d9f040fce1ea2219e64857","sha512":"1e58d1f9a594b6d9b0e3968c137216904a37abef225ebf00b88d6764df8c8ff0226f5f6307a23e48944071bdc36ed786297968db893be66cf7ddca778015e6c3","ssdeep":"","tlshash":"463110e8da56ebf43c54a30ef7386cf13157085b78d38224052f1e8a23dd519afa8862","first_seen":"2025-10-26T18:38:27.855792Z","last_seen":"2026-04-21T21:26:35.817927Z","times_seen":41,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/StatisticsOnHoverContainer-cJKYZQf5.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/StatisticsOnHoverContainer-cJKYZQf5.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:16 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-2634\"\r\nage: 2663\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=_VjtbXDPI66ohv49lMWRaerKzcEy4jzpghAszzk1JBE-1774113939.7031224-1.0.1.1-3QZ.ilNtM8ggB0nYUkgydKDbne0Q8jfIqyCenkq5Oyk9S2ViULSkjiy_rv8HWZ9klpgbfh..v4nklYnpe.z36VT4th_JhDLENXPXVemOPdOiHZAcEzMKLZGGYl8RDeK0; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3kmLE9xd0I4VudD01PStj9T2DAgrtwEh4Im%2BOhH8p1kdpRn7TvmrKfmwB3o9LkAmcZ8PpaFOtJuf0gy4s2Dm5kZmzoEmqqfPqPnRlYKpOVoYj0%3D\"}]}\r\ncf-ray: 9dfea838ea4e9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":9780,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (9539)","md5":"e5094d6cb1adb9cffe4cc19bbd41805d","sha1":"a966fcd915c9800719d4ee6d1db7c56ee305f79c","sha256":"c9483c1de5209a20f3506b47f0bf734708a6c375dd49629abb1e8c91f4f17b9a","sha512":"3ab0205957724986be26159446aa0be8166bce8507f971fd0352cd66da9cde2244516f2e9ceb1b48a13c3093426f72a036aae6297ad9fd6e08c4f55c19b6e38c","ssdeep":"192:Zzn2zkXAsarXDxLwxGEE0D9AOgzmcj/e0R:ZzBParTxLwxGEphAdzmcj2q","tlshash":"1e12736c118e5f6af41a8240b4202d35bb3a3877958d66f87ebc440fd3ce444bb9cb18","first_seen":"2026-03-21T17:26:39.498002Z","last_seen":"2026-03-22T00:40:18.104764Z","times_seen":4,"resource_available":true,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/DataspotTracking-iQyfe7l_.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/DataspotTracking-iQyfe7l_.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:11 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1fe6\"\r\nage: 2668\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=uprY67XqYmVJYh1vO3JttMl6Bd2_4GRgvRnbKtTe44M-1774113939.9516265-1.0.1.1-6cDizVy3QQn3nqk1NNEMnww4n4aItICI49p6ypLEZHFD1c0KCs1VD17EWAid3CscgenfzzrjzdxFyC1tQtwbJJ8m.InHtudYcdHCA55miDMdbhogRLokifn5A1xGgi8w; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gbl0gkGjh7uYJpGCOf5fw%2BAgl3Mr8DHHIC3hxQZo%2F%2BVQnUrbdZhyzkz210SLYhuMnP5eMWzmri%2F2diQB5n%2BicwgiD55JvybNq7TKhtFSfZwxaQc%3D\"}]}\r\ncf-ray: 9dfea83a7ab09cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":8166,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8165)","md5":"f1553761c57f3fe8977e11f9a5acbcb2","sha1":"0428d0e7de8fd59cd72a53c25c6d1646dbbbcd2d","sha256":"14ee5210761d6fceb87796096a7b97d4bf6dc77c671b081746ccd47d6b96c94b","sha512":"d31f722b3000e1fa4286ab76fd77cc4d84cce25893da33e8315bb220f0ba8103120a06a6577becd1654cf17895d99a128a4fd6fc3b4161f0a1ab8dd37dd4a805","ssdeep":"192:cEwDqXQcaXE/ucCOi1Kb0cHHnBxCHenNvuvXvqvxuhqVeDt8VZuS:TAqXQcaXE/QAxCHen5Q/0gh8k8juS","tlshash":"1bf1f455641e68bc7033c6ad0d5721a248387051e2329de076aacf5a9e3d9c28ff77cb","first_seen":"2026-03-21T17:26:39.500998Z","last_seen":"2026-03-22T00:40:17.814005Z","times_seen":4,"resource_available":true,"data":null}},"time_used":531,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galebet1065.com/configs/d212f7f1f16e55d50593214ba05a0f99.js","fqdn":"dataspot-bucket.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /configs/d212f7f1f16e55d50593214ba05a0f99.js HTTP/1.1\r\nHost: dataspot-bucket.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 17 Feb 2026 18:00:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:25:41 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\netag: W/\"6994aca1-47e\"\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=Cep3vhCRWNOetu6CK5cfXAFmrwIMRm2_Yfp7JjwNCHY-1774113941.166041-1.0.1.1-HqSdd_HLoV.RdvtJ4ogTG3yLG2VoLuP2zbDbugYu0TP5_BWCoLV5cY7daHtSexQWPH81MUoOXth9h62oYom6zI_OxJyAytaxVSqjpe0X3Wzc1v8fYNhNwfTq2_w850Df; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rKWMAvTW9oMl9ofbyFKtSGRyZVslMufSofrbC%2BFahnp%2BOTWjnXFGtEJBsu4glCcG38twZ4TUfzpWR16JHJDp7OEpsv%2BRKgfKddx4AOW4lUj4KTIumzJYu193pVzuLuw%3D\"}]}\r\ncf-ray: 9dfea841dc659cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1150), with no line terminators","md5":"c502cf55b2a3f78e648f2bf2b2eb6582","sha1":"cd87424dc2922aaedb4d7418e581a1419e8ae5db","sha256":"24f898e9c39f054c6511010c44744db4702dcbf9c75ae5cbacbca2fd852f50bc","sha512":"ae83a469460b683155b1c51ce1309db2b9324f146a6274fd33a18d7b5e2f6807baa4c9d049ae330e03917b4bb85ddaa33122250a7e286aa541fa0fc60cf7ad97","ssdeep":"","tlshash":"0221e49664d8bf7706f01ef8e3156a48b4567f487031c849529fa89d6c214c24579f8d","first_seen":"2026-02-24T14:18:16.940585Z","last_seen":"2026-04-21T21:26:35.738939Z","times_seen":29,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"dataspot-bucket.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-app.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: jD3YWZG5NtFt4BcajB7OMpiBQ.UUxxmD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OrQzaRHga3IfcN4ObLBTb9PklprC8zLJ1qCIc%2F2Enoh9WH13GaPK%2FG2VBo31z5%2FtxQNfoNj1gciroC4ptFBG34MGgsYGefMBQZeY2K0opPnKxJptL6LejaECJylMoQ%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 abe7c423e3f506d9a86c5f57fbc5a762.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: Zt5itQnOAEvJSj4iUwGJUsWr5jkCtM-JhHgGXXQhmGpezj9Ayi8Prw==\r\nage: 63\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"c2b96460440b1358a43a511913fcc46a\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea845ebeb45dd-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75107,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/pageBuilder/pageBuilderCssConfig.json?v=1774113900000","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /pageBuilder/pageBuilderCssConfig.json?v=1774113900000 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:25:34 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-115\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=yneDGus8AEi45jOEFUYc7Jjnl3kYz08oxlPv.BkgJvg-1774113934.5122156-1.0.1.1-50WqMs2Ojq1WGIp2iVF.gOww3GASmZdSLV8jD9HGwN2tQxX8Gih0rwmJtLa6s6k4a9yDVcFVtAXZeZkLBTJxwvM4xmIwm7GFYkKC57OL4RAvSnsreTI0rMuQwX0GN9U3; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1Qi6TG6aagsN6rpsG9i2M%2BN74qMln37DPyYWU7lPetr1gltyiofPCqJIdbLd7CJhOEmyvXhtq1RqaFjnx20IPhVYvg5VicWKcriJYwlUYoJScA%3D\"}]}\r\ncf-ray: 9dfea8187ce39cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b840efc6276e4fd17616273698453549","sha1":"ff864e74ee5bdcaa4e9d713064ec9e6d7f1a7c33","sha256":"01976b4e4832d5fbf632314e6b12424691dce201138109710061a398178dad89","sha512":"35bb7dc6b4e44da9f15700eeebe04d122ddfdf41af0834f0329169c0fd98d3a9de79ca9c879d92f1727985ca07ad519870af961ba75a865a898cdc2d5035fd6c","ssdeep":"","tlshash":"c0d02b119679cf52235a51b2028becc1641bf207118086896485e2bd70c96581993f24","first_seen":"2025-12-24T22:39:16.255341Z","last_seen":"2026-04-04T19:51:35.016652Z","times_seen":24,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/events-CcSKgVKr.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:38.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/events-CcSKgVKr.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:01 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-17fd\"\r\nage: 2677\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=z_q6aKYh4FYQwogTae3MozFw_24v66IV6HAKLr4Ov1E-1774113938.9271877-1.0.1.1-TWPgStcHPVDQ_ahNFtrd.YOKx29ryZHdZtOWByJSo3o3rlvso9UUe3KoVBkS7OuYO2gJWzBW1gjP_IewmXv8jm7L40ZpPZqDCWyUup1MVN_e5ojbia_5T1Ck8h.8k5KK; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ArshmNfAKZE3cObuKxdpmBhhrtvgy0KktgXywCKmvqXzs%2BYUmSQQgt82FZjL60go2Jkfp1M%2FxBA%2Ftkmk%2BZyh1EJcPrl%2FPeQmtFftdtWNt3fWqls%3D\"}]}\r\ncf-ray: 9dfea834399f9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"6fc0eef96fad08bb59201d62b01a05a3","sha1":"70b77730ce38865b4743bc672d001253ab6f2840","sha256":"a47b119988977abcd7e45234a7b28325876a133c1b5acc203fa7dec725fea22d","sha512":"75496f580eb9eb357e8bbb21a32ac3021a3c8289ec816b96f412047d8ed05915fdb06a40db5af941985f0039d0ff6cdcb2b99f3ca5d222041be0b647caa4c816","ssdeep":"96:0d9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:03IM2sWMtBq6n3PzH","tlshash":"05c143ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9a4126fb8","first_seen":"2026-03-21T17:26:39.445809Z","last_seen":"2026-03-22T00:40:17.797546Z","times_seen":4,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-BnlPX2hH.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:38.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index-BnlPX2hH.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-CUbLXDx4.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:00 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-26774\"\r\nage: 2678\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=TtIkYpJm4YA1KLlG0ANyDnhW1mez_Q7oq6LEj3UI288-1774113939.3910134-1.0.1.1-b6BnuFyBdak42pysSGoW9Hy_.US.U2ts6xBE.aX4Xg5qc8JnTAZCLx7s80IW17HaWvkgLhYn.QOKbWR.Z8nhl37FiPF7UWBv11Xx9YLduMlMtT7vUjldy6DCtd89LJ5J; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UK7QgPFR7m65WS1k60ex0b5lVRrekTJ%2BVzwYYDPvKQ41cykEjAKcLi5qPaSG4OYlVkAKaFikqFGcHZyunVHezng9%2BrKXNRY8%2BBSK7Ny7MdMM7QM%3D\"}]}\r\ncf-ray: 9dfea83459a99cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ceba5fdbbb3a97901b9dc8c2ad5b13da","sha1":"34eb6dde8211dd82b04e0b064b89fd42c9347721","sha256":"ad91370fb603d1ae1fb182b1dbc011d8371c2d98850658bfdd0177eeb6d693f2","sha512":"e971aa680fdb7fdcf8ac304ba0062cb5cd618a9c2b95eeff80250378e39441a1e4098440a3c80ad3f6d6e0ee54f37e54aa74ff34b2f200af61b68f72cdca9c45","ssdeep":"3072:mbwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:2whFHU4HNwFH7MoOWexZFHV","tlshash":"02f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-03-21T17:26:39.513457Z","last_seen":"2026-03-22T00:40:18.06025Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1025,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/fonts/default/Roboto.woff2?v=159","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=159 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-faf8\"\r\nexpires: Sat, 21 Mar 2026 18:05:49 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 1191\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=45YpbWok7ZfVFtCdLCDVACxoffNrwjfLfIDWX31QwrU-1774113940.2656744-1.0.1.1-Rd2bpzPkiEN2wu4Pts5POMsLl8lCZF8bLMYDOBK9f7xhg739dARpgxXUQVZ1OBM.ijOJlhx6ZBGYVJARa3v53zjO2DJc.g5tamTBc_Zke16M27qZ482hlzdNgbhc188l; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2QzokM5J7AmRJuB6QnkomtsdXW%2B5IJxRUw2gmf4EgD6KwrugQ%2BDl9M0goEy0SQ1sS%2FGiIeImpTxS%2BvQ%2BLjvDt0cN7h0kFKA0qMZRLhsUFbre9YQ%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83cdb519cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-04-19T18:34:31.433936Z","times_seen":2689,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/946.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/946.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1426\r\nserver: cloudflare\r\nlast-modified: Tue, 22 Mar 2022 09:34:03 GMT\r\netag: \"f82e1bf8cf3dd81:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 15 Apr 2026 22:48:36 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 412625\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=IStTlY0zdYgvrQJjZakLlETqmJS_5dgsENF75o7nX_c-1774113941.6103215-1.0.1.1-NJaRylu02Ydf6YisUMQ8tbw5WHaDb252.cjEJG_2.Ut2gZDlVqalYT_E9vEr6h68hAItsxqiZlqeqpleZPS4X_qR3.u0RqUOFQKOiH.OG52vq2h7VN89cy14fdQwLWe2; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Nf%2FkCz3tkYbBIJTRclMSh9LlzZ5Ykqy%2Bng2%2BtuP7k0xhD3MWxHf7yK7OJ9MVOSthk9fWce25uIbT9PiXv0qMpF%2FtPW%2FQcG4aC63K25Rx29soa2n3cZ0%2Favy%2FKk%3D\"}]}\r\ncf-ray: 9dfea84708675a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"66a4a01575e7808c773bec77b270cade","sha1":"9a8392cc52bab97db72d6b85e5d9b86c616d9ca8","sha256":"fa3cd2c065b2549a867cec918fa183914daaa3acad7cd4f5226e78f2c908e003","sha512":"06a00dfc7ef59fa66cd52dbcfd4c0ac2f623eeb353dd6dffd094ab99365b44cdc0621f18bef56e1c3830aa897a3fc614ef774a3497a8687ca8bd0a28c4bf1497","ssdeep":"","tlshash":"212119d8de5800719f236c1701ae15333c26da7a9203aa65712fe2446408aac128a3ee","first_seen":"2023-05-16T07:21:41Z","last_seen":"2026-04-10T19:13:21.677068Z","times_seen":194,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","date":"2026-03-21T17:25:38.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"30:09:A8:2B:50:A3:5C:0E:2F:11:01:80:FC:9D:20:3D:1E:0E:65:96","sha256":"A4:2D:7A:76:57:2B:43:3A:8F:A0:D3:F3:1E:A4:E0:04:33:BD:AD:1F:12:67:F2:9C:D8:4B:7D:42:6A:6A:FA:35"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 21 Mar 2026 17:25:38 GMT\r\ndate: Sat, 21 Mar 2026 17:25:38 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ba5f8ab036327a2d0db94fd411ca555d","sha1":"650f19f36ca742cdaf99b327250d2e1d894828aa","sha256":"1f924f494bd000c6d079ce85dbb1bb27c778eb98cccaacd0f43f3d6b5d9ca3b7","sha512":"ee72209926367e2b0b30df98885cb6a3ab91877a54a807fcfd43a6190d749480e34f54bf2b96293150e64f8ce8fbe2d874f1360169b6c2f246fbb618c2b1cf21","ssdeep":"","tlshash":"dbb012371e11c8280c100143c577a7b8e0014079ee9080f9a07c0fd411901b38001690","first_seen":"2026-03-12T21:14:04.610711Z","last_seen":"2026-03-27T18:21:46.943865Z","times_seen":10300,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/BetConstruct-Icons.Cf1oAhV4.woff2?vt93w6","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/BetConstruct-Icons.Cf1oAhV4.woff2?vt93w6 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 418540\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\netag: \"69bbf7aa-662ec\"\r\nexpires: Sat, 21 Mar 2026 17:41:03 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 2675\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=tAoOgEFnEYm7NjhZyr4.TkeUTa8b7hvHVmEpY5KJws8-1774113939.7248769-1.0.1.1-ji53ix47hIixSrEc1es6RnlPq6W2rdAt.FshpzQgLBI5BucYTSyTVcMlfF9Exp1l56HMAGeS.fStCuE28BVzSriC_2HZnuWTXWo2F5BvYkrYHUZYVhdeFiuCgfG.tz8s; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rn%2BC9oi2MmeFRGFviMu5nhWL489hd14lUiFFImftQ3CY0OhJO%2BA1pyNUkGvHxtEyOSsRStfuRhEAgq%2BhAmH1OGSnXukuHH0oEYkkfqvEZoeIEA8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8390a649cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":418540,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 418540, version 1.0","md5":"eeaaf2532d764ad40b6968d98359bc16","sha1":"c9e5f877bc951f0c3f4e0beed1f3b612c5e8ec44","sha256":"93e28b4326dd21727cd4462ed3ca668b5bf1631a5650e7ba204eea84aea08719","sha512":"23ec0312f94bcbbd294727d806ac320ccb1885d6ebd577c72ba894e48fcc0e248b65df103070fd59ecd86069ff849da0b77f1576eb95760022b23f2e62e68ba4","ssdeep":"12288:Avwu11O8l5sit6BMy66o9WMkNy/4v2sqvzVKnVR2f4pF:cxl5zt6BMyAIt27vx8X2WF","tlshash":"449423e03f529d2971a1968bbf6f0da8c796d35c19d28a02ccfc0665395c931ac9ccdb","first_seen":"2026-03-21T17:26:39.52114Z","last_seen":"2026-04-19T03:33:37.387538Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1010,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","date":"2026-03-21T17:25:38.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 19:26:18 GMT\r\nexpires: Thu, 18 Mar 2027 19:26:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 251960\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-22T00:08:00.648594Z","times_seen":753672,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":36,"dns":1,"connect":8,"send":0,"wait":17,"receive":6,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1404\r\ncf-ray: 9dfea8439c2cb28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfvWH7-l2WGZEJvxD_-cbyo5fufmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=722+3 c=0+3 v=2024.10.6 l=1404 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1404,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"434c7550a1a937d1e7e8bb8416691d9b","sha1":"d837654b42d1474560a5698cfac3514209cde2c2","sha256":"5f0f065528ec2543e34a03df1cd588b4c4ce7764d1ff62e67cec0677f638c549","sha512":"eefe6cf29ea82af55070456f2bf2cf1ab3c3328938ea092695f0a25370e6cef7ed1da43633a4548b22b46d7d7a87253ef01b2c01847ea84725cd4acc7be813fb","ssdeep":"","tlshash":"9f21e6a32c3914ddefa65f1485a00d8dff03c1a5983ee3d896e83548e5788da6ca00c2","first_seen":"2024-12-05T15:42:26.602777Z","last_seen":"2026-04-21T21:26:35.581198Z","times_seen":2471,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_4c091674cc1b8a757edda70f9a97662f.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_4c091674cc1b8a757edda70f9a97662f.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19028\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 01 Oct 2024 12:45:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66fbeeda-4a54\"\r\nexpires: Sat, 28 Mar 2026 14:35:58 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 10183\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=t9HeknjLR5VrafNjW5HI8HGdYyiO1iEBdGj8.0Piokc-1774113941.5635514-1.0.1.1-yfthjAPfqZkSa_gzwzl_GmtKQ0shj87m2A4ENyHOmfjecwUh7C_sj6Uk7rbQzLZpnk5wgkvUBnBGdxxyhE3aq_0EurLMp1r8WSfCVuqBROiqLSzrwtl9GkmxG1_2gN.w; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzbRKfYXro%2BBDW3zrVAC9P7np%2FXCMdJc5cTnV%2B04l%2BL7JlbCWSKvZZch4uIM5HoBSChLsEUQSVbyY52ikEuyErRPbz4HUqoeDAge4ELKWt9qY63g5w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8451d479cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":19028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"470ce435d160ed8e1bb2c716c12f2bd4","sha1":"42647d800b75281936e1427193e663f6c6aea371","sha256":"adf12d4f2eef34d98c80198b305fc79522cef8ffe98b36263a852afe7c7d3a54","sha512":"03487ca714d93651cc162135dfc4558db1a3ed137e1386aebdf37fba4957861664f6461c2ee462ad22e21484e3e8d4c87286b1935b412972047668e6a063c396","ssdeep":"384:TTMuAQQFE/lQynoYVSZv8D9gHyuiL7vF11TN2pWeLTmSdF//xIjYhop1uCCKEhN4:8u5K2o0WHNiL7vF172pWATpdNxS5pxEc","tlshash":"d582d13a8138838b86d7388ad4dd1964ba674a4c6d2a3815d37c6f8fd8f114d137587d","first_seen":"2025-12-24T22:39:16.382831Z","last_seen":"2026-04-21T21:26:35.777125Z","times_seen":34,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"events.eu1.segmentapis.com/v1/p","fqdn":"events.eu1.segmentapis.com","domain":"segmentapis.com","tld":"com"},"ip":{"addr":"52.49.32.105","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:43.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"events.eu1.segmentapis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Sun, 07 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6E:BE:8C:EC:AA:F0:8A:50:90:0A:E6:C9:91:BD:26:DE:D2:1F:39:C7","sha256":"F9:2D:36:7B:E1:0F:B9:06:71:4E:07:2E:BF:99:BD:75:4E:49:9F:E6:06:C2:E7:98:EB:1F:A5:83:10:CB:27:41"}}},"request":{"raw":"POST /v1/p HTTP/1.1\r\nHost: events.eu1.segmentapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nContent-Type: text/plain\r\nContent-Length: 838\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\naccess-control-allow-origin: https://galebet1065.com\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"90749a50019a27e1f32cebdbaa7a1bc1","sha1":"8329e3339f928f8591024bb0f938dab99c0ad4b8","sha256":"12f71cb993958eefc4bdb41d7dbbda490779a9c7aba448f7be52bb63912e0254","sha512":"b3959e671f729eda8aba59886df18c60ed5a768a3357dc09b29069b0da9c9fad7073d0072dc47f3ecfdc945351fe82ad3b653dd5d79d01096e5ae8bb42af2bcc","ssdeep":"","tlshash":"b8700022000000b200a0b0020028a802a8a08c0880820028c00a000a8a022802082008","first_seen":"2023-04-06T01:58:03Z","last_seen":"2026-04-21T21:26:35.754762Z","times_seen":6133,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":162,"dns":15,"connect":37,"send":0,"wait":38,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-D3fSQXEs.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:32.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index-D3fSQXEs.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:52:27 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-113a25\"\r\nage: 1984\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Ygas_0MVg.XCVNzPKUzwnVaQdjNW.k3dUIrbtQ.PrHM-1774113932.275452-1.0.1.1-Fo0TAHLVRv3VsV5AXkbGl.xDpBkElL48.NVX0dnR_jZccsVcR6FFBX.YimHOY3aSW4sfurZ2nLZN52yVbHbHAVwWM0tSHPBVdYyfzq7zzqrIEUBLmnoCWBsoxEKuTlOS; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1scBS4C8lauCeoYQ58IQWHH0CNzG6iDaTxtz3wnxVMx6j4IzRdhWayh4jNQup0oncChqYh2qZbCARtL8CGCaylqQx%2BJDTd8ZwB78GN76NWW04K4%3D\"}]}\r\ncf-ray: 9dfea80afa4d9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128997,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (25207)","md5":"929fadec37e51bc98c507f08534eb166","sha1":"b55290765e2b2b36ccba7e4cbf769d24adad91d3","sha256":"ac4eac97d9c552ffd6e9ee38cf494ef9adaed90bf18c04fedc8f3604533acf04","sha512":"1178f47e487a9a6914759a26a6c9dbb5f3ba527d6527bfcffa99474d8c9b4fd3e5eda41af6293b3527ae764236331d3bccda1d18b6ce9275c6080c4507294c7b","ssdeep":"24576:5Dauc8xbGV0CzrP4e5DkXfhPy6L2Zmv6IoVxZK+inbuVIXEt70V/vazSCMlAjRBx:5Wuc8xbGV0CzrP4e5DkXfhPy6L2Zmv6h","tlshash":"cf257d85b155b97997b709e560af1002b2391e00f84dc4a0f57cedad29bd808a2b7ffd","first_seen":"2026-03-21T17:26:39.531015Z","last_seen":"2026-03-22T00:40:17.795538Z","times_seen":4,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":467,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/logo.png?v=1773142319","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /logo.png?v=1773142319 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 7738\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-1e3a\"\r\nexpires: Sat, 21 Mar 2026 17:41:20 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 2659\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=qlyvRge6ryZOmTPJdCyeqJ2A8bqh8vuK3LLz785WOC4-1774113939.4943893-1.0.1.1-1aPqI6Unc2WOov5jjvVrQF2gfOpXTknBdF__sgWQ38pX0D3nl9BjexAMTcRXrrmiJQyCaVLVdkNgTNwcMsmoGaUQOhWUr3k90PHOIMllTZwDGhFyMihPJEbnynwQAqh2; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jzNuhoexz9m1H%2BIjtPu0q3BA7RwUsruAUyIVI3r9S2jQgpq2ZkcFuRSg8MffFeQgrU3GF5sMlZ1a98clMUyvfoFEJdO1x9CLTcdbZAc6DBrEPHg%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8380a169cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 120, 8-bit/color RGBA, non-interlaced","md5":"60c432b2e1f44042e6831b308a2fcd28","sha1":"a0092dc780b9c15f23421dedf670462258e4bfea","sha256":"45f7ccf0315aa2e44a658598ba76a0993ffdb4ea7dbfbb569ddba207929a7461","sha512":"f4a8c1c80e4cb91a70a4801ca5e7efcc5e4cc742f4939f805cb65969d34a896b1bf2f82c5f2bc2869b8e6be0439157f84b1365dfc3c76584ff2cd983e97d5eba","ssdeep":"192:yLexi5CqFsyyyjU7Bmu3n/0Hw+mvTZHOpoNI2kAZKqn:yyUVmoCVFvTBhIGZKqn","tlshash":"69f19fa70753e811ad00922f841e0285bfc412e5f36bafce13b3df19862515475a96e1","first_seen":"2026-03-21T17:26:39.532964Z","last_seen":"2026-04-21T21:26:35.527408Z","times_seen":24,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/DepositCountTracking-CxmA8res.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/DepositCountTracking-CxmA8res.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:15 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-285\"\r\nage: 2664\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=I0sFPoVI5NBIzURe0nHopPys0w1FKyqxwBctB95AqqM-1774113939.624003-1.0.1.1-ZTMB7KVA0X6v73SDQSnrekItctkza9TdV_6C4qlNptImrECjI7xt5nT5bBBMXULWajrBhaghb4w6MgowL2QEI.QgW2nFzPP_r3mTQE6I2f4C97CXAZ79VHa.JduNGY6R; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zo14NCwLBHQIPxrnWNxQjvtUWenDtBl82pVWVajs%2FgDlfF%2FuHYbr4LfTsT9oUyy4TuU5QouhkoM8J%2FwqqCi6OsSwvcivMwZ7CiTlnSqkM%2BPn4jE%3D\"}]}\r\ncf-ray: 9dfea838da479cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":645,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (644)","md5":"9d4ba86dc1f2979b2061087e4b65ae2e","sha1":"c36d25550b91506c59fc28a1c9b6b59a818cb8f0","sha256":"0b444453f7ba634138131d4bab736e6d47b934a22a327e836cb1e4cb7f40d07d","sha512":"f5430ddcb6442609556f2f0d0aa7898a44c81b15386b06983ea5d12509976d70f1a6586b8c6510362579762c4634075f1db1171cf6679776be80b3aa1601efff","ssdeep":"","tlshash":"7df0dd5768b8d5f589493a8072c798a362f0791db906c8c386b98d470208042e4ccd2b","first_seen":"2026-03-21T17:26:39.534402Z","last_seen":"2026-03-22T00:40:18.198864Z","times_seen":4,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/DepositCountTracking-CxmA8res.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/DepositCountTracking-CxmA8res.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:15 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-285\"\r\nage: 2664\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=oKuGavvbSIWOLfQ9ReY.SSHvwLYjGjKS_fk4vMT0BsQ-1774113940.0792506-1.0.1.1-wxVT2b7UIrZdRLkEM80H6P7TY.H7nrqhcgPhO5AergfRmHYHHRJ8ay9eU9j5FxaYbYVgoJMHEpkED747AZvtKjSwIKw0tw5Qr5pWkDkXIxChQUtDbMwg8IG85tWvBv1V; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hu1wSueVT1%2Bi6TLebcRZo7JxpYIoqvqdGMzqNglvw1dnFYxv7H3fYrvLcRkzoJGpNFMKozTW0rw4ahqGQLoK84S%2FXqHVBGu4vrYBiMDs2xc5dJI%3D\"}]}\r\ncf-ray: 9dfea838fa5e9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":645,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (644)","md5":"9d4ba86dc1f2979b2061087e4b65ae2e","sha1":"c36d25550b91506c59fc28a1c9b6b59a818cb8f0","sha256":"0b444453f7ba634138131d4bab736e6d47b934a22a327e836cb1e4cb7f40d07d","sha512":"f5430ddcb6442609556f2f0d0aa7898a44c81b15386b06983ea5d12509976d70f1a6586b8c6510362579762c4634075f1db1171cf6679776be80b3aa1601efff","ssdeep":"","tlshash":"7df0dd5768b8d5f589493a8072c798a362f0791db906c8c386b98d470208042e4ccd2b","first_seen":"2026-03-21T17:26:39.534402Z","last_seen":"2026-03-22T00:40:18.198864Z","times_seen":4,"resource_available":true,"data":null}},"time_used":851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":851,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/useNotificationsProvider-B6RWZkIU.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/useNotificationsProvider-B6RWZkIU.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-5c\"\r\nage: 2657\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ubJT8o_.CYBTuPFLfGqE_1iDR0vbJWdGr8zwAwaDfYM-1774113939.9959888-1.0.1.1-xrl_c5mgTGpiVUQGrhBMIrGngu0dtoGF45r.WEAdH3vp9pdzPMyqCBPOPau33pkQcsA0Krem1VDUVuftIn71PZT6LU4bvkgQZP6BXgfHXsNAf5s9nxJknyBzck9Petxc; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2N2196CbIwi3qNQ3xTaitO0YrpUc51rxcwxJBZmQTQLjrOAiLiiFmtbaV51BKT%2FPOlDP%2Fdy89h1klRu5uKxk6RkoZzxO1NsnQLmecJxyFS%2Fi2c%3D\"}]}\r\ncf-ray: 9dfea83b0af79cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"6a107b604ba11023c433398a7069f684","sha1":"530390a2949705378fcb2a483d2706b3de06d63f","sha256":"3261bee16420406d05ab5271fe9918ae8c11452027b028fbddee83b242e8c5b0","sha512":"fbb4b371e140541e0af34872e340d31d851f73ddb1b6731fed79b3baabc34f36179628277717b3d6fe082d81f0e2940e4d4a551a1ae0e1d89f4937a0ec0c5dbc","ssdeep":"","tlshash":"5bb01213485053f1210108ec12264c290e30083d3381cab11030414811e40c5930e905","first_seen":"2026-03-21T17:26:39.536834Z","last_seen":"2026-03-22T00:40:17.926035Z","times_seen":4,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/TvGames.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/TvGames.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=cZh8lyyX1TfT.W4wbNFrOKGLR2RaRQSGKc907WmtpeY-1774113940.0964205-1.0.1.1-GhhLXs0Sh3oiLEUYfbsne98_M3.LLpmb0HD9UrS5HiV9rNg3Vq4.F8iDhIbsTvdIDVve2m8WDhnEZsK_Cz.6Y4wUUkpm8bbdvMtJ6cqwmbP9Ho.KXiC27C.SnPMhYUyE; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1SNs2k%2FQUDIDcbucb1Sfk5VqYLUXcAsA9VxtrDJ1P%2BOklDhdRxb3fVVFtGgUdlKwO5wghpKvBnwHPwsKSI6Ahw61%2FRstW8ErdDny6uPqfNLSDXPONw%3D%3D\"}]}\r\netag: W/\"686270a7-c81\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea83b8df211c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8cb4d739571507bd6cd3b25a15163537","sha1":"f8061ea6ba5d599b463f5f146b407b0f6fbe4bfe","sha256":"3b2f15bcef3e58ac040feea4d073d42f18e48bb6f399c4f9f89845931f87085c","sha512":"38862ca5d9bb144dfa4b9c0568f05439e788848d45f8891fe508570322d34200ecb0e3f70dd9f1e8ae5659ae3333fe154d439e797c556ee94fbf88f47ddc3cb3","ssdeep":"","tlshash":"41619c87ff3089e04a7c5f99af6840d76689c05dcf731118b23c643e5af7d5884ac9a9","first_seen":"2025-07-08T10:50:27.694177Z","last_seen":"2026-04-21T21:26:35.656047Z","times_seen":437,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galebet1065.com/configs/928de3c284a560a4ec2990544700741b.js","fqdn":"dataspot-int-bucket.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /configs/928de3c284a560a4ec2990544700741b.js HTTP/1.1\r\nHost: dataspot-int-bucket.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 22 Dec 2025 14:02:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:25:40 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\netag: W/\"69494f86-9a7\"\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=jLWyPlGbG15Sha7TTY0vjliIbNKH9M58ZvM4XEWwXzc-1774113940.677178-1.0.1.1-nfPZvvsYQs5GpXBGh5.DKWeeUvMY06EK_ebAzwuRNv.6D8vM136kI7zeA_SPhhCKPIVB82s9hsI0novdZXBGZYs3nxfN1ZRj0Veh_RLwPJASuFG5Im7qSkow8uelTKfp; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUPXtkyNKp1nF%2FGKglJKJ5WxUlw51MqRFWvphWMxdgT%2BpGEX3YjPaLXys5gb1DuCqatmtu1JLBw4UX5Dq%2Fc7m3ND%2Fq71T%2FlMhYAx7IZDXcTtqagdiTQUlc2HvibywzeZKkcz\"}]}\r\ncf-ray: 9dfea83efbc49cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2471,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (399)","md5":"1e2a6c49770a52100388701459104032","sha1":"eb58c40e53a15e3b55fd60c07276e5479e07a89e","sha256":"161586af456353acc3ccfa1748aa3886066bf8f3c5614a5c4db0e4df676adb2b","sha512":"b601200e6ae6894ca67b3afc195d37fea9db1864900cb63b60428df3f106c70ea2e379566d43c326c3b7d439895f609866b2c4a54d77e7a2697f066c05db6a8a","ssdeep":"","tlshash":"aa51f31578e21e7300751435a55768c0b422bb47152ad88c3bce760c4f7db7995b5b8d","first_seen":"2025-12-24T22:39:16.396562Z","last_seen":"2026-04-21T21:26:35.793924Z","times_seen":21,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/HorizontalNavigationListItem-C9W5wxFK.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/HorizontalNavigationListItem-C9W5wxFK.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-2d8\"\r\nage: 2658\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=OHt.QV6ZfpdhJfJQSU0IDJUx9o2RHQKDlujWb8KogIQ-1774113940.9468598-1.0.1.1-MWnW22jhEn3WUIF2lTcMwrLxXKqIMF8HPceCmZ00MqHahoSC3TAi2JpqJpy8jVzSJfg6uWTQ72RLmJyQ5hRQGQjs3JHZ00QuobIFee2lCVmkQOkxot4RhUZMQhUYP1PY; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZyqa%2BIVZSe7fhoVMe9APUJ9xGkC%2BSg1oxMVtkuUpHSNrmoYGZNPc1CkaQiCfkJ%2FwntXnC1cvI9CnLBWPJdUq23nggJCuIs%2FyOJXSFdetOSc43M%3D\"}]}\r\ncf-ray: 9dfea8415c479cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":728,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (727)","md5":"ac06b8982ccf6ca471baa48a0c19c40f","sha1":"2beae61a21fd2d59f9f03a8795d2efb19aa6baa2","sha256":"9e4e946f9caf7daf8a634127530fc8588afa0ed9668f7c6bea709315c09f99d2","sha512":"5f0361d32bc8cc698b97e0c47b49f3de892c438447041a8eed5c71097b6e390f96a6759981c40b8f446f53ccd31c4af978881cd7a86261306a6034d18552fe67","ssdeep":"","tlshash":"a701c001e014db7c9a2b55c86b9e1089b1579afeef382cf1a0f4e11209344593646e8e","first_seen":"2026-03-21T17:26:39.54095Z","last_seen":"2026-03-22T00:40:18.030844Z","times_seen":4,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-21T17:25:31.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=2,cfOrigin;dur=49\r\nexpires: Sat, 21 Mar 2026 18:25:31 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KnEhKLbtSHJe4pnI8ELyA4fidD3yDFdYcKvgcXwaoCc23om%2Bf3tKpxyqh4Q%2B78cenKBKd1tx%2B4qrQDKuYkzS%2F4TsXQF6Y1TQeF86sF1GTBdyGL8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: SERVERID=s2; path=/\n__cf_bm=FOQODDLpjz.4lEdL.bmwco5l5KdvusYUdtF3iGGbq04-1774113931.57987-1.0.1.1-5GthLtqaDBGOEO7A6WUzJ7LGbnt3cYwx7cb2pC8uqOVu.b5VL1pfMYPZT4e49DVaczsqfSKPP9PSd5n6lOGRk53exWJ7EUWaGHOnfHw4mWfreboiiqCIA7CxllZcI7vQ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:31 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9dfea8065888fb58-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":3970,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (503)","md5":"9cf843ef6ac5f879aa59c1ede77f8523","sha1":"c30afc572fc7d32b8a3e569f1a1529d04c86a9c4","sha256":"b0848d6c836361d6e903aee5f65c704bc3befcd70cc3ab1306979d6cb14e203f","sha512":"b31c95c5d8ddcd53e2ed9ed961eb096abdc926a1dc6ea88d763b3883f4fb817117e3ea9d62b02a334368452b9d42083279c2bcb859c1717fef9ac194082ebac2","ssdeep":"","tlshash":"2b8120472a10f819221545b8b9e2f808cf16a54bcb05ece4749ea6fd1fc07e4ccf346a","first_seen":"2026-03-21T17:26:39.542597Z","last_seen":"2026-03-21T17:26:39.542597Z","times_seen":1,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":47,"dns":14,"connect":8,"send":0,"wait":508,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"79b4aa69d45c4b43f0b31fd971b1bbdd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 814218\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea82948c11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"79b4aa69d45c4b43f0b31fd971b1bbdd","sha1":"77122463966366aaa969b55f404af7903b9d8f86","sha256":"34b9a3ffbb7a87b04fe51abdb665588b82d1e5fba4cad27b6d6518228d20c2b5","sha512":"6bc666c4e89838ba9d62ccba15b642154cb69eb86ac22585e64e11eb0bca2ebc710c3c5cf8993a99aa85035e1ae44d566601f6b7649e7d92fa3d72a2f53f252f","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFY7dZPkx3u4V5pfYMrlSf:4nmuTilGhmPx3u4V5pPrlSf","tlshash":"36a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-02-19T03:13:10.618029Z","last_seen":"2026-04-15T01:21:42.737131Z","times_seen":8426,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/LiveChatAdviser-D27OhzDI.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/LiveChatAdviser-D27OhzDI.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:10 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-35e\"\r\nage: 2669\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=hbrBiCgfiRKC9QDQrF4l74CThhspp7snHL52r9B7PPU-1774113940.0216243-1.0.1.1-ILwZjgr1k18Bb_a6hIU0G_UNvh84Ri1Kq.GkIMinXNGg4E4KT.HspOeJULGKOAKObfRilmv891INA4NmTjo6ry4xbcy2ndf4jXcue4qCWFAH9cTMDE5dtYJ3w_FmN4de; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rIrb1APe8I4cAgJqTfhITzEJzJEuHo5M3kG%2FZC3lVu%2BPDCzjkPV16QkgEspIBRbCD8aUvLzIjAuTmDe3vDjok%2BZswsCuXmL%2FTK9XSygbRj%2FZVh4%3D\"}]}\r\ncf-ray: 9dfea838fa559cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (861)","md5":"3f2f2d7d30934cdc6d0c21e68d266516","sha1":"e2f9d76a03d3b6486f98e28063874aed70597f6e","sha256":"c0679235f12e7fd2c68602e19e347b02bfef3b2294537a021c919947c34ad810","sha512":"ccfbb78a037b16838f08bf177af40478c903b90d8625a5ce72007afc3b19f6afd999668179c42580a4c0116dc034fe2b3ff63a69f1c48a6bba666596391e3836","ssdeep":"","tlshash":"4e115295f0c2e3fd6667284dd7ae2043700a4fb5d22d4db6807b19601a2ce09e30eed8","first_seen":"2026-03-21T17:26:39.544297Z","last_seen":"2026-03-22T00:40:17.804736Z","times_seen":4,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/withPanelButton-Kc5QyNkV.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/withPanelButton-Kc5QyNkV.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/FavoriteGamesButton-CYfYTrLX.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:09 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-441\"\r\nage: 2670\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=LiLGbP.9R5iQZtP.5T4atwYJ13zYsfu1Sj.D1HRFwCA-1774113940.300137-1.0.1.1-pMfX3q2wt2dmo9gjeCDdAdblxtxRWN2.UKewGIyt5vPGHKEkks0WdWYzfWOvYVucUnbEpFvO5AOO7hD.Nrgmq_G486URU7orO67HyhoU8PQ4mO0z1UsLyZXLNtN6e_xS; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VfqNFBv1dsFma38qioL%2BWvg5X2%2B5HpbpX0y6pqy1%2BQuDpLka4FtLVT4G6xB25iwA32LXLIcyjk9UtgStFULs4IpNUOjmpHQNvRtCz2LNdWoRotY%3D\"}]}\r\ncf-ray: 9dfea83d6b829cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"716c41abf4e6c14cf885b87aeed6613d","sha1":"3284bee4f3fe8a1474c6fd5feb8aa09a3f8725da","sha256":"9a4fbb219ee8354bb94cde371f38b1fee6544c9f2b29d7549e60961847841485","sha512":"58d7ffd4e6f156b5d7b0138ae3a19ac35e0eacf9e1dd19fb3259989a19041331796417a74dfe218105cbc286386470c1cf38477e105107362cac2b0f032ebaa8","ssdeep":"","tlshash":"ee1112e4f5c4a9b2f4c41188577b2cb2759f32d9dce114d031b2c8da5fe8048991e9af","first_seen":"2026-03-21T17:26:39.44375Z","last_seen":"2026-03-22T00:40:17.873544Z","times_seen":4,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dfea840ecb2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4368,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1594744c430c14575dd987b06663f8af","sha1":"6ae3a00b9045083fc80dba950b908f9e7513e211","sha256":"db922d127c83813e54ac9a7e4fb61318bdc34765fde199edd3859da07f9b1a04","sha512":"6dbc4888f6eb430e5c148b063707a5488e01f7a4ffef184ac67db37cb847c0d69eff429b0c1bd3122ca4b1594229d6f4f600497011a876d5ddaada4d1fb9569f","ssdeep":"96:nNSNbh/YiOQxX+1A2teUB7SOMVMrhIa1WUqrZurozkhLQtwN:8OQVqfhSPbUK6J0i","tlshash":"ec9110b79f444a5e2b2407c9702d3e9c855e250bcbc09ceaf0c0cf2984f9eb967559a6","first_seen":"2026-02-01T05:09:11.282943Z","last_seen":"2026-04-21T21:26:35.591684Z","times_seen":181,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":48,"dns":20,"connect":1,"send":0,"wait":246,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/HorizontalSportsList-DFiYn3iS.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/HorizontalSportsList-DFiYn3iS.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1a6\"\r\nage: 2658\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=UBTvZUoiQ1r7aYPuwlrsmDm92qwhmFde8q8IanNMqz4-1774113940.9271686-1.0.1.1-vAzBC6_dNU1mBen4gvY2Ra0qt4vSUZhPFQ5HAqHrxdiLF_kLjRTOH_w1gBs9OWIsu1pQK0IgsQVr52Vg4rQygP3ubYCmrVT5uK7KfiDvR_OguF8_GPgmlgcKn1O0ZCbF; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yj%2BWyYSqWWB%2FwTtItwteOdSEpqNQVJ5NMrINcogV%2BNnWQbXvjIhIKOoJsjXigQyU3Z%2B7ZsZEr95K8dCO1Zv8tRRRF60PUtdxWHqiJxVhisph9%2Bw%3D\"}]}\r\ncf-ray: 9dfea8414c429cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (421)","md5":"9e97ea9cb856db5aea93097b24ee839a","sha1":"3216ec0dd353cfd8cedc5dcb9bd06e0e6c04dd2f","sha256":"f0d7ceae5b03c9848b3e7891ff4b73462b8aaba69044516382b1a93b9369f97d","sha512":"14d66003f13803ceec3064b27084a362f95a796ae8724feaaa0596aeac0f16141f26adf5660e396af9ea9fff16e3d322c005a133c116c489f80f414be0fc1850","ssdeep":"","tlshash":"06e02b81d8618ef55a2a88efaa5c24846122087cff47a6b1d29492182b7508bf72a40d","first_seen":"2026-03-21T17:26:39.547601Z","last_seen":"2026-03-22T00:40:17.818577Z","times_seen":4,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/TabItem-biu5pdkE.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/TabItem-biu5pdkE.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/FavoriteGamesContent-c3zcF83Q.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:27 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-19d\"\r\nage: 2654\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=QWDCyz1d0ka9vRGgp4usyctkhaQBNmtM0N9ppEMK9Zk-1774113941.646003-1.0.1.1-FWiL1Nz99R6Su8xuiM5sxFRszdF9dTj4lPrEsQh1B16PMlAgr6j0GsomgdSDH55cjh4ZNy0Guf6oXS788rh84FKuw3zaXX_XwyJzzOCIg1l7BAPilz1HB7rHKISf7eVD; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUkfJiKDikd7w2mQmbHgdjGDMqBPIw2CCGuhos4IbMkOAJV%2FfCct4t53vZPktjbTOGukpNOsdy5uZD0oAtfg6frVwpHV6RneZT%2B4N7R4hEt4Lgs%3D\"}]}\r\ncf-ray: 9dfea845ed839cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":413,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (412)","md5":"e572f7147d80a282b702909de3e002fb","sha1":"0c64bdba98c648a7f33e629de97d0fa6a3d04608","sha256":"4f0aee67a47ed48c4eee0cdba6b7f30408ff84fbb5023e85b2ed8963ca4a458e","sha512":"0276a4ce85222bc1c92cfe0ee96591fff70ff13f56fd7fab3d0607066f8b0ed98cafd146bf4f05d575c08da4d1b3328578b0a65ceb3c45b365215a81aa713942","ssdeep":"","tlshash":"5ae02b42b020f3f5982b94d6d27f94c7322209dcda9588e6a0a22440072e561f74ff8e","first_seen":"2026-03-21T17:26:39.549871Z","last_seen":"2026-03-22T00:40:17.82563Z","times_seen":4,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 902628\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea82948bf1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-04-22T00:02:58.122214Z","times_seen":36199,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/fonts/default/Roboto.woff2?v=159","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=159 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-faf8\"\r\nexpires: Sat, 21 Mar 2026 18:05:49 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 1191\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=SaLtaFc60qJopdqPeMZZ_OqRGRACXVhb5eNA4ie.UoU-1774113940.696537-1.0.1.1-FmthVsJML.7HlZiPWier4sSedgeOn6fNKqcaio8P5ozKnWxEdoW3Q3u8YXWKHqlKO8NIT6ztbSXTJxrRpoSw.OrvMPtcvTU1AH_UsZ4cpvVJOg1CYaVf9Hnufe.RR7QI; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lGW42O8oS1He%2BWHGb37fX%2B%2F3t4cgsJXeNVF8%2B%2BjcAmcu58YHw6J9I9xCg3rBMfzVEXaCPcsIwtsSj11fGbOYtJnRu6vXU74PGxNBj54jHEm%2FTq0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83fbbeb9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-04-19T18:34:31.433936Z","times_seen":2689,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":459,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BjgPl3QA5IK1JuZYhXx185roQriMTjA2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64WwjO0N65HbBDdUdZfLZ5XPFW1EvRYD%2Flghq%2FpGfW9cmeKYk1%2BfdSfGd5aVBO%2F4AX78AAb69O6I6sTNqKy74WjWjG21EbifSu2NqjACzIExey7UD3G4cQ%2BAV7SKwg%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a8b68315e1e2575143f97748ffbb29a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P1\r\nx-amz-cf-id: QTu4In4zEovVAvds_4AFI8j1YOgiesQnxle8diKfcFvcf5zmsIvRXg==\r\nage: 64\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"a2363889186e23777b4b704661794f3d\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea843ad2345dd-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1831195,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36723)","md5":"c90bf1ebba9227b49bee8df0f313c781","sha1":"b3fc897560a85fda078566bffd014a574cf3db37","sha256":"10cbe15bf1c3117e24997514f41ee3201cbcbb101532ee47144269a1f74ea0cd","sha512":"c03a851ae0a2e2ea3bcbf7e32f77c1425389e597342a1e576f8fc3c082693fea15aec1364feb532380622a8574764a588d7f5f0540cddfc9def441840287f5ed","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+w7b7EqGDeuPLK3c8WsIJS8oqIpCFaFIpSAJyi:xGBzd6BgJn+wT8ZI3I5owpTqG0yp","tlshash":"3a358388295ef3500997e0e7e03b2d08d12ec635f84ba4409f7197b36ab6357e3ade15","first_seen":"2026-03-21T17:26:39.553237Z","last_seen":"2026-03-21T17:26:39.553237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":36,"dns":1,"connect":11,"send":0,"wait":113,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/936.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.483Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/e/s/0/936.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/456.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/456.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1061\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Apr 2016 09:04:21 GMT\r\netag: \"2e222cce3e92d11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 15 Apr 2026 22:48:36 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 412625\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=BwKwvqVgU9ZRulNIrXFtNg3xymA76J5iVEaadoXP60c-1774113941.615554-1.0.1.1-ccN2tjyZflwG79EGxASKEX28kPbKf4WogcB3hYYqPuUaqLKcR1As75038iJsWKpXovPpHg6wK7jVYcYtHqykQOF2q_CFBUnGZ0Yi9aAHLmMutAPWfLExpXMWdZ.L5lSW; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ijgd%2B57Jcxucyz8xhBRjicrfkCNexpwxdcfYRuKnD7Xg4ygFOI4FXjIfTbLEkj8KyAUx6bQEb%2FE1p9JZAepfTG0IFdR5dblfluQqPV88czMK3Du8cz6D8Wy%2B3Uo%3D\"}]}\r\ncf-ray: 9dfea84718a85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1061,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"dc142b4286c2f4c542da122edb7851e9","sha1":"d20c2d8239843bf6425c414ddc5482e59a591a54","sha256":"0af21af658044292876f71a35dfe316b9dbef457850d6c671c617e06ec680da6","sha512":"d2c1775972d49129037507f0a17113ca9f42997707fbd705b018a87dd57bc4758b6942602fee3c9dfb2faee3baf26b174d16f4d6dbde638770625ea2a66467a1","ssdeep":"","tlshash":"6c1186d2bdf8302da5a8212bea435d95a591736526931844af59ea1c0307d48c487594","first_seen":"2023-11-25T15:41:35Z","last_seen":"2026-04-10T19:13:21.714444Z","times_seen":199,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-D3fSQXEs.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:38.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index-D3fSQXEs.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:52:27 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-113a25\"\r\nage: 1991\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=zxRbQgzTToZ_YlTyqqi90O3E52ILemcbQefGQk3xGBk-1774113938.8129425-1.0.1.1-zcSin09ALQ7bg9H0dQ68A0xmQOTXNLpzUdpMuWwLzQWst6mpaQMMjB2WR5.1B09h5KoYtduqU4XaN0LN8EcWj303hoTjMLV7fOl.BRZ0PsZPSEzL9a7VmxCTRO4glxDY; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZpwkYahAQRS3AFxYubsuM1vNJXCCjOqpxrEa3PeKtIdRjRcj%2FaNQHv3AIrazZyykb%2FnS%2FA6OO3Q1fOHLk%2FL%2Fbf6YxF7zhH14%2BPxIC%2BCmxsoPwCY%3D\"}]}\r\ncf-ray: 9dfea834399e9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128997,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (25207)","md5":"929fadec37e51bc98c507f08534eb166","sha1":"b55290765e2b2b36ccba7e4cbf769d24adad91d3","sha256":"ac4eac97d9c552ffd6e9ee38cf494ef9adaed90bf18c04fedc8f3604533acf04","sha512":"1178f47e487a9a6914759a26a6c9dbb5f3ba527d6527bfcffa99474d8c9b4fd3e5eda41af6293b3527ae764236331d3bccda1d18b6ce9275c6080c4507294c7b","ssdeep":"24576:5Dauc8xbGV0CzrP4e5DkXfhPy6L2Zmv6IoVxZK+inbuVIXEt70V/vazSCMlAjRBx:5Wuc8xbGV0CzrP4e5DkXfhPy6L2Zmv6h","tlshash":"cf257d85b155b97997b709e560af1002b2391e00f84dc4a0f57cedad29bd808a2b7ffd","first_seen":"2026-03-21T17:26:39.531015Z","last_seen":"2026-03-22T00:40:17.795538Z","times_seen":4,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":466,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galebet1065.com/storage/medias/galabet10/media_751_e36e767f918c2e0b1323c581778f3e42.png","fqdn":"cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_e36e767f918c2e0b1323c581778f3e42.png HTTP/1.1\r\nHost: cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 3162\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 09 Oct 2023 06:12:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"652399de-c5a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 9725\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=1ujiCPz0ZFfxutKAjNk_anUfNbXcmsCtAn7It7d_Txg-1774113939.9141119-1.0.1.1-Llbzi6iBA4pKS5CA6xzmRTsPTPFh0jgDeDDc85TfpH3RdGzS5b0uZAH22UahS6mxYZWeIZjT4aUkFxQoD.M8uUtVmXYlrjfckJKQ_w7YvYUKnN04.5I_7iciauu.UuLY; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljgcTXEMmLK01BDCCxI1lwJRQFJzWikxUcFwC9egm7OxBL1Y7OU6B9Z2vdSp4jUB88IJ%2FBIKu8humHMVRYSpzZXj7Vc7Ex8NjWBq6Zco2ExDEOc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea839aa7d9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"6b367a99bc86c352b5f45eb76ef837d4","sha1":"18d9b34beb5b22f7b086c4f803e6f21a95c3d22e","sha256":"e54c8f4ed20a3052a3d336f6084e083fb5c040aa67d85c170f0380ed0a74b75c","sha512":"c616fdbcf246d21c51373417c69af47c207bc8e6f36d4f3b3c53b83cbfe41bde4562cb147087264c68d1133c7378f477be104e8ab5c3927f7ca732981416c8ab","ssdeep":"","tlshash":"e8510af5f108241fc7a4c9721d59e0d3bd6af44e942d998f70a0d71e343b0a9d1c6966","first_seen":"2025-12-24T22:39:16.355284Z","last_seen":"2026-04-21T21:26:35.608693Z","times_seen":34,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/460.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/460.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 422\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Apr 2016 09:04:55 GMT\r\netag: \"c4a8b4e23e92d11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 11:27:43 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 194277\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=kxLfI8E0tt29iHTUPVA.ZBOuk5BQdoi8eObvcQRdYpg-1774113941.6184487-1.0.1.1-qYbxs9hTFXa1W0OGZY0u835ksI3LHtc8z6gN2riwzVDOj7c537fjMZxQEjTAR81gQZnvBF_9Jb24xnhH9ZZVEJzU3JUonvDBq5B2QczSvNVDFyVa_7pjwBcbRXvLEcg9; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7mzXNqMaxMQYbfKvAkUm27R4471pahYpDGBsDJa7jQ9MCbg8hHi0aZZ57z5xt8G6l42mf5l9U2XAe%2FUvgxAJ1ZUyjdAw8P4KsAxHSWNHL1JPH%2BmO%2FLoO%2BcfjFo%3D\"}]}\r\ncf-ray: 9dfea84718c85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f000f7ddaa52892f0b638c8116e0736b","sha1":"065a350cf5d8bb0d5d855517c65e1c667d1e915e","sha256":"b4f9bcd740c6934464e2b445e2b1fe0978b56b19c1711f23dfebad9a1414256d","sha512":"59c1e06ce3ae3e5a9177f7366c2e24c2cf0ac5fe0dd76993ea36b38ec39ea78e827c03ddaf72da964801721b898db69b5a7bd85a1f3b7693c5771b874bc040f8","ssdeep":"","tlshash":"ece023836168407fc80dbd3403274414c4a6107fc444580caaa0cc3043ae5d91261502","first_seen":"2025-08-24T00:36:18.253284Z","last_seen":"2026-04-18T09:18:55.781675Z","times_seen":185,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":24,"dns":1,"connect":4,"send":0,"wait":26,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea8189f0f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-04-22T00:02:58.084467Z","times_seen":50423,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"ecc9e5cf090bf5602a01763e2895acad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 917903\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea82938ba1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10938), with no line terminators","md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-04-21T03:41:36.055908Z","times_seen":26441,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-WIMCHaiu.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:37.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index-WIMCHaiu.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/WagmiConf-B0zYIpvp.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-35fd8\"\r\nage: 180\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=VXGtN.2KUl.qkyNqSShNuYXrpTASP5jhDcH8K1WaTNc-1774113938.0594835-1.0.1.1-7I0FncvIwZcBnoJmFTju3VN4CNOeXoYd7dZQgWMHbyNWb70Q1oCiSFkShq_dTeEEO8tOJf59Yy695r3gPLYJ0VHFCd8Egk0hWIe_51Xq6FoijjAzSPTno3LZMXoaxP3U; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cRxGz%2FzVIqzGakSrxdF6HpRVIBgPlpyIkULFbbpwH3BKYcPV2%2FzSScla4bA3UG4RSWTA%2B449WCATnCuPpLxxqotiMWaD%2FEd6Bjw%2BiNOhmiPEsnI%3D\"}]}\r\ncf-ray: 9dfea82f98b59cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":221144,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523)","md5":"9b2782650ec3bc7acdc4746a40024c65","sha1":"6eff74730fa0eda9e5abafaa734c505751244788","sha256":"156c9584ae57455fcccc4ba27c44cf9a380e5e904a06092bae04b487ff57ca69","sha512":"0391894fcdf91d6ec313cda92e3af9aa61e90a611157bdb38e1853002c4d23cfe88693ab8f96be3e5c8a70d6290e505cecafb89e1279d08fd59d3addd635a4b9","ssdeep":"6144:MfeL9y0h4R78o8e4YaIALoh6wj9Sd51jjVvFavIRcDGRD6On:MmJy0h4R78o8e4YD/j9e5xavIFROQ","tlshash":"6e240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-03-21T17:26:39.395349Z","last_seen":"2026-03-22T00:40:17.969853Z","times_seen":4,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/CasinoJackpot-B9xPGuUB.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/CasinoJackpot-B9xPGuUB.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:19 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-3803\"\r\nage: 2660\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=6ecJxOXqy.8f.RGVGKEYjU6v5JfCLQ_kd7VzIDIs0MQ-1774113940.0150654-1.0.1.1-Cvk0VvOuSo6FcdT15B3qjrj.Xm2nQo2vOLuR1Ec0pdGmuJFIZvpUSh9OTuHlVC8PMtdp.ZYLZcmut9iH8uM0aFkZkujhz0VHpQXRtnk86b2cTcfiC_IgI88OMBQpQBx0; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JBr%2BPtfce3oah9LDtuKaXp5aQ5bAB%2FvDZP57P%2FPXGBrOl2D8%2Fv2TzEyOTwyNEN19CylJxi6DY6%2FN1z8NOjc1gD99hwq8wu6xcxhOsS6JnWCVnoU%3D\"}]}\r\ncf-ray: 9dfea83b0aee9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14339,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14338)","md5":"c681dd00011ca8f396b64d03b78c8d33","sha1":"984d629f7a1c2f7d57a81c77cfeeb02d6d851e53","sha256":"cc99cd3a07b804e7ce37254db7c6bebf70961a2a0284038437e5dedda04b7279","sha512":"0fddbf82b4c4250aaae9c53cc10ba58e7909eaed6003bf15e48780bee54835b67ff55a40cd92ff4cdcdd8d8ceb6e786ed4b3f85863ccc23d29b3a37a5b402742","ssdeep":"384:bm6srKqqF3EjFOFEGOpOpeHMtGRxeG/Pcy7x299pP8FJgr:bmB7CEGOpyts/U3Qgr","tlshash":"19525c05f012b7edbcad54f7887ee0297a5e1aa9c71808b8d1bd6c313c2c855760b7ac","first_seen":"2026-03-21T17:26:39.564114Z","last_seen":"2026-03-22T00:40:18.034532Z","times_seen":4,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/img.png","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-03-21T17:25:40.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /img.png HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 21 Mar 2026 17:25:40 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rB%2BekBsqmnAl0ZivnpK8QdJzX2R6GecwuTrboO5phGumlQpnogjHeMt7wZpuMhK5S5U3F7pGkKbdupH4M8SAN2xeNGw%2BzTLY9hTZslIOG4ANFqYgF2E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dfea840593d76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"2ad3a45d82e0940f4c3dc90088721bdd","sha1":"a85bbcda89334914c332b2315aa94f32c843c867","sha256":"bdeff9d8a5ad9b3cb7dcfe91fe91080359bc5a836d18d2f78e1d308c412d87b5","sha512":"06a4f493c0b3fe9ca7ecbf17347ce0aab1e3447c4c62e2876b945fd13f40140cdf11b66e8a799492d8709ba21ccd90c54c7c5f446370bbc7e2579d0b0477360f","ssdeep":"768:VQRzoYMic5jrKBzf/csKDh/GxEsBJWnO2iPRvzLsiWY:KpMVjOzcPVOKJn1iPRHx","tlshash":"3ed2e12fe1997b7a550136f649372eb5124b0e5a54c3f878c31c68a8c217b08cef5ab9","first_seen":"2025-12-24T22:39:16.249591Z","last_seen":"2026-04-21T21:26:35.707421Z","times_seen":46,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galebet1065.com/api/public/v1/tur/partners/751/notifications/whats_new?platform=0\u0026country=NO","fqdn":"go-cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/notifications/whats_new?platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OP41ZPDDsoAUL0b1i3XEnH%2BhLukjamk6eNmoGWNVEYRumdJabyZj9VXCZKUXEgvxU9NFctrZmf2SwJl%2Bs3Pjz750R7drHgpOF%2FNnBArJ58DZDBB872c%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=EaPR_qs6XiaXO_K.e775rG51BCX87inExChOfqZfAr0-1774113941.6434133-1.0.1.1-P0aDhFIIdXuOZWH8VZGOyYpRk5FFEGb50G9mxoO.16qAlwXBgmz2TSyihM3AizbTRh81hnh3HSmh6SjWeedtMdTbarRGEvl7kmsfHR0Za4vE.PSjJ_R1AXuRAbbtYK2V; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea845cd7b9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d3c54fbb58bdbc049cdb0511ebe72bfe","sha1":"952c530fa5e60d5e6f4092dca93e957ff475f0e4","sha256":"e937a0e69c3616d29c6b6d653f7b58c1dedced93f6c31b8c4c7edc0aa70af0e9","sha512":"dc0267bfc82cc2bb6c9c397203c45bf5c4515432a8fcd8f0c50bedaf985707d1c2ad0fa8bfc057e3e25bd40b82e41fc3d6b57ffa4ebfa26699345edfcb66571d","ssdeep":"","tlshash":"b8315335657d4f4c8f81178a9487f12ea40f035aec54fa34d658cb6690686b8d5331e9","first_seen":"2025-12-24T22:39:16.028828Z","last_seen":"2026-04-21T21:26:35.82421Z","times_seen":45,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"go-cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/403.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/403.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 945\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jun 2023 13:09:57 GMT\r\netag: \"6c26b2b54abd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 15 Apr 2026 22:48:36 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 412625\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=oVNWkxOn_Dd_xAI5xEv.4ER4Ab3acoWihbdVdJP1M8k-1774113941.6079237-1.0.1.1-jdtiGaGV237IrGQkMqNxq6_0IeyTTfHJvwJksTkMpqS5VghVe8dO9VoyFKwzAvxbgiauXQobOkhVhKCWpPXzL.oDfh0NTv_t9NpvLpqdB38Zh36lodrf2vD3s.nmf8bJ; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fYhUokkhPrjGAYLcBIuW8YFcnIVM6z%2FwDT6pmE9Cr5X6tJiZ2A4uDkiSVnJERRYPeOxigio7qQQkQL1Mvn2fYi6o3r7FRwr52dylwDdzTP0BNmLZV%2FyKmq2ohmw%3D\"}]}\r\ncf-ray: 9dfea84708565a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d6792d49d3439ef0c5a88f2255f568d1","sha1":"eba8e82d1fcc6228e955d50f949f992c40a09ee8","sha256":"5e0c37b00eef60d609e7d5456aedf5168e4fbe67df8fa9c3a30176217f669918","sha512":"c5a00d4ad195f700a89bad4ce29a11e37be62e636bb8e924328c2389c5923c1d98f2914c801332a73a1854d117d3189e103087bdd8bb1b26bb68a55f3bb48c8d","ssdeep":"","tlshash":"6e11c8e605bdc0fc0a0f49a2c21a5d62161951f5273923caa416e27abd302c6005877e","first_seen":"2023-11-04T19:13:32Z","last_seen":"2026-04-12T10:11:04.76654Z","times_seen":369,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1337software.com/jsler/16bce798aa7eff0a39106e935a4d41cc9c5ec31bef333fccde989abce04a699e_588.js?v=1774113931.702","fqdn":"1337software.com","domain":"1337software.com","tld":"com"},"ip":{"addr":"104.21.18.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:32.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1337software.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 21:22:41 GMT","end":"Sun, 26 Apr 2026 22:21:17 GMT"},"fingerprint":{"sha1":"5F:95:55:BA:76:9C:CD:43:A3:6F:A4:3E:A5:80:66:4D:D2:28:44:64","sha256":"F5:15:94:C3:78:66:6C:E3:C4:E5:0E:41:60:9A:8A:70:CD:D0:14:3F:44:71:71:C9:21:DE:EB:12:78:64:02:75"}}},"request":{"raw":"GET /jsler/16bce798aa7eff0a39106e935a4d41cc9c5ec31bef333fccde989abce04a699e_588.js?v=1774113931.702 HTTP/1.1\r\nHost: 1337software.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5966\r\ncache-control: public, max-age=172800\r\nexpires: Mon, 23 Mar 2026 17:25:30 GMT\r\nlast-modified: Sun, 22 Feb 2026 09:00:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WE78kOI5Dx1oEjdppE1fArn%2FWK4g1ifLTh5buVn3AEg%2B1o42uY6eRtQR2q7FHjp4lak5CyHVmGq2wRQLi3f8rwTxyOExSaCzpm6rrQjAp4s%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dfea80b794ff527-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41066,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0c550f8f856abcc53f961bf77d57d4be","sha1":"5ff8449e0de203db2f23a382612ce850fae8cef1","sha256":"0566b8f6f7df7a815049c24c6378f0d06ceb212996d74908d77137583971bd56","sha512":"680c5cb634e7e41b4de41e2d0be87e396c560600efcfe7cffd33eff66cb68af033f73e5dc44446d09095ddb597980ca007a84e609ba3a403977c5d6d2fb20201","ssdeep":"384:zUBbl8dYsbOSLiwi06cZTfwzHzbllIZVHHxGCEfp:zUTpN03ZTfwzHzOVnxGCEfp","tlshash":"f40330dba56305f105713aa07dd55aecfb86805bd4040ea27bbc021e0fb287ae6e15fd","first_seen":"2026-03-21T17:26:39.568179Z","last_seen":"2026-03-21T23:21:16.956422Z","times_seen":2,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":54,"dns":28,"connect":8,"send":0,"wait":291,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"87f83aeea14051d9edd97ec3dd41fa0e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 822563\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea82938bb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"87f83aeea14051d9edd97ec3dd41fa0e","sha1":"8649c359a630d1c55eb268ff051d5a284ef7587e","sha256":"38a072ee28e39fadd2153244a3f0a48df473ce7d8dfe16e2f2fcbe5d9cd0bc6f","sha512":"c56e03220951ba738fa2f29bec6d02b1de5ca769f1f41c39ff3f12334b16d0a82db78487c4e4cfcd8fdfaddf4af6b923c725af335346028224efa849bc140eca","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCrGN//h6LiJq:SzP2DZSLi8","tlshash":"37822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-02-19T03:13:10.613764Z","last_seen":"2026-04-15T01:21:42.807167Z","times_seen":8478,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/VirtualBetting1.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/VirtualBetting1.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=c4jvrc7rspaxeqYRPx4p3bFU_qUE1brNtVGG93V13hA-1774113939.6111336-1.0.1.1-s5H_o1gNm4SUm54prdaLDhKfYwoaFWETNNFexgXVRrD9Ripx4c14pUZW_W4Qjjjv2HEh8pNKAO_WOkJh5Ktq9VYwRp2bUWAo7FAMbXuauedGCcYvSsAh592.L95kvrZS; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qwsiSOIqL8%2FQUsH4e%2FkZL4c95hFuLMJFM2WJ09IpvDpGUsa%2B%2FEuNWOPb0jR1%2Fk%2FPPVeXFrPCQyl4w%2FOdIH5j%2Ft7A8MtCVHIVd9uszvn%2BrXy0VQVCBQ%3D%3D\"}]}\r\netag: W/\"68627104-320\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838c87711c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":800,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d36eb3cba0196446e5ecd1a41eb6a1f1","sha1":"d6f113e0850fe1dcd80528c0efe40b1b9b0e38ba","sha256":"9e07f25c6032cecf5b0bb0c9fd6411af2930a1fa4be994a7c9125a9047e3db3a","sha512":"6eb0be89ad9c5f90473a271a751901c458c9dcabe6116b8fcdd95d97ed741328571fc081f4652f41f81a6a23eb7ff9e89e290b39af1799fe5d75b96ea78743b7","ssdeep":"","tlshash":"9201f1edd57025f0c4882befa76905652bff443b0552bb28ceaa0d0c3fc796d9210422","first_seen":"2025-07-08T10:50:27.844023Z","last_seen":"2026-04-21T21:26:35.602234Z","times_seen":1471,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/Casino.BjyJcCbk.css","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/Casino.BjyJcCbk.css HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/tr/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=MI9FGqvXfq6U6c4JXu4XYB2ZVo2I7nKSddmoK7NcKeM-1774113939.9600143-1.0.1.1-49gKSO_HRYev2wd_vOHcDPESYMmuwISbZTkjwJf4AXcYY3vwh5XPOGXpvApaPs0yGTzbDvNvDG7yk9M2DTGNYa8YTIg62aEpeVMvAoN1IITg2pBXZd3b.cdAqARGOan.; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nexpires: Sat, 21 Mar 2026 17:41:06 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TiNjmdtjJYng%2F%2FH5%2FRsnrKTQY5hFE0aS8fPwGhxDG%2BJBcyZ%2F%2BFaz1L7L3mikSaJdmg8etgm3UTngxWBKAukflwQpqh3Uqd9jSP%2BaO8TwN2EQf60%3D\"}]}\r\nage: 2673\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-8bc1\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83aeae09cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":35777,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (35770)","md5":"f113b1c9638ce76e385e727e0ea46694","sha1":"277195ae07e5e5e6bbb4b6732c3a04d41af04eb3","sha256":"5365ca88751244c00948d0275a580d625398578985219c10ab31efd9f8289c35","sha512":"768492a4bdec3871cd5e1eba328330f381846d86c3d9a9f85adf02e49f6d53042c1846be971b332a5f73702b2351f4a048a799744993e32b65ee9e4321439c15","ssdeep":"384:Rpo8j6E4sa1Hk9eeGKtNyGG6PwPJwWzY8IwgrOl009Hkz7qQXFDpNDF6:RZj6E7Ie3uIIEz1XN96","tlshash":"6cf28673961923bd75b796523ac0de9ce81c48b9da232641ec967237c3c79992c307ec","first_seen":"2026-03-01T06:34:53.940522Z","last_seen":"2026-04-19T03:33:37.264761Z","times_seen":53,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/AiPromotedGamesWidget-Byj5O19S.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/AiPromotedGamesWidget-Byj5O19S.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-784\"\r\nage: 2655\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=yzggdFYxFW4x7OFitcpmfK8D3o121YmHpmuXxoGqh0c-1774113940.030547-1.0.1.1-YH8gkHrULwfwYaL5pnFOFeVRgapsZXc8PvC7OmFqVLEaGeY4y.NKYSl3KVpN7RmO7i2xpGjYcWZOoQ0KWXAn.43ViK5c8GbjZvzgzWHXVwHJTH76_vqhcWCW73x.sG7o; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Csf9j2BqVRqP1%2By%2BBcLuiHUVgC5741uego1b%2FAPAAutxd%2FdsIkBlrU%2BD6uXLeCBRqx47jZCidGtJc3xKrSLga2zSVrtapI%2FaldlMHUw3%2BFYrWfU%3D\"}]}\r\ncf-ray: 9dfea83b1aff9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1924,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1923)","md5":"84edef470c315c31d3de5ed0b5105d95","sha1":"635ea115da194dc2ab021eefd7e1bbfefc98e181","sha256":"1843bbc55023e4f235458fcdaa749beb69d2142f16b74f6e32a856dfab2b77be","sha512":"696adaf49f0aedb5ef049390a5c7df027af83e4c4454986f813d7604bfbe26337ce2e3a64be60378c83f166536ac28161aa909a88837dff435e4d6719699beb6","ssdeep":"","tlshash":"8741642bb019ca7cf22c06a05294f745a42177bdd769a0ecbaef1900731409d337df85","first_seen":"2026-03-21T17:26:39.577171Z","last_seen":"2026-03-22T00:40:18.077623Z","times_seen":4,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/useSportData-D5mIIwaP.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/useSportData-D5mIIwaP.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:25 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-6ea\"\r\nage: 2654\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=VXilw._kaETvd7.DaJa0.RAMxfo6Pq8vy2wdo_gqqZ8-1774113940.6844656-1.0.1.1-gjFtvv48a5oui3Zhv2QMwJrrtgjR_YDMNcnuOYET0tPjVKBdZ.IZXPmzK7HZ7T8Zlm369hWXaKRrjoOTDSiDFpZg5XK5lqFVTdKqft1HS90dQ3Vf.wkM9itneBzbi.9t; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRrUwP6k89rTJ45PbkGljEJ4%2BfF7sfxA0CxTI%2BWjD1erGy2pYXXEWEvigGH2ek7wNY2KTxqSXUYpOeH6X5%2BvswU7%2F2SyEMACz4GzpLiUvKU70kA%3D\"}]}\r\ncf-ray: 9dfea83fabe79cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1769)","md5":"f7bc8fc6052d5a655061f7542db1202c","sha1":"aab80cd0d185ea5888d946784ec94f8eabca2227","sha256":"d61d6440417a3709d55589c4c2f270ad4bc8a5639a7d27a9c0cefaf90a5212e2","sha512":"f783b09da3370e101d9e384a486d58f3bfde3019d730eef3934a85e1118b581dda88ecbe89de383af7011cf602f7c77da49aa063faa46101b264cdff3a3f36eb","ssdeep":"","tlshash":"b131874cd074b070953944d5d1ad6e14e434191d3b32eed1e85c0a197b6368e027ed7f","first_seen":"2026-03-21T17:26:39.579526Z","last_seen":"2026-03-22T00:40:17.780877Z","times_seen":4,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:43.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 21 Jan 2026 08:14:20 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: J8ajF9t6IlT2U7tuuuuEWLpJqziHNggp\r\ncontent-encoding: br\r\ndate: Sat, 21 Mar 2026 17:25:29 GMT\r\ncache-control: public, max-age=120\r\netag: W/\"26d5c6e9eb5b8acc5d7f0a4acb0bb17d\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 193fe983778f7496cce206a132f2e55a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 1Sz03s_XaHqgsW7mgHSljB58NUfejMheLqHLumLsmJr5wavI6iUltA==\r\nage: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":108916,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"26d5c6e9eb5b8acc5d7f0a4acb0bb17d","sha1":"f28c859ece3ceabce922bbdf6272f9f7e826b783","sha256":"8ee1aaf2ad1cbca21e0581993206ba9ffd736c611beffb7287581a87cab67ff3","sha512":"388bd8e7a24945d1a3db30cd4cc03f006d5222f5b399b6578eaf9f87707fefae25b423aa0657dffd191f980827742165f1cfe7577a899ac63ed728bdd9886ee0","ssdeep":"768:IAObYQP9MBTSbyDRP0aubWc+ZdLyiQL96+hYs17eFCgt/oJBpntD/PN/xd0MpIJ4:TQP9MqMZ+vCBF/g0vmBuNfftrcuk","tlshash":"8fb371c8f6d6f064439764b4803f510bf23eb96e680e8464f266dad26c7899d9133f78","first_seen":"2026-02-24T14:23:50.976435Z","last_seen":"2026-04-21T21:26:35.819592Z","times_seen":34,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":59,"dns":47,"connect":1,"send":0,"wait":27,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:32.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:32 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9dfea80b2dea5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-04-22T00:00:41.102401Z","times_seen":45654,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":7,"dns":1,"connect":1,"send":0,"wait":17,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=67a3e7473a842732607a39b8\u0026widgetId=1ijc3usee\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=67a3e7473a842732607a39b8\u0026widgetId=1ijc3usee\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-lj5n\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-38-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9dfea81d5e581a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4008,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"342d347fb9178da5e83d5f2a83400e4b","sha1":"0b6a8e76106df1508f8c731622f84f6b9025e0df","sha256":"1e35d40a2ee96a25e35bd747bcb0769f5e05a5dc7009a7c52586bfcc2419d8e8","sha512":"1c73381e74025bc9f7aa9babf100b7d0e4c0957ba85039673470fab0d1595520ba83920af5326ccb5c5f0c72ba4317479aea276434f86fec981532a300abdba0","ssdeep":"","tlshash":"af8134254a5add79a3c5428371de3527e43df123d384591df1689d2883eeacd322235f","first_seen":"2026-02-17T14:59:45.037899Z","last_seen":"2026-03-21T23:21:16.908051Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1918,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":1552,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:38.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"30:09:A8:2B:50:A3:5C:0E:2F:11:01:80:FC:9D:20:3D:1E:0E:65:96","sha256":"A4:2D:7A:76:57:2B:43:3A:8F:A0:D3:F3:1E:A4:E0:04:33:BD:AD:1F:12:67:F2:9C:D8:4B:7D:42:6A:6A:FA:35"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 21 Mar 2026 17:25:38 GMT\r\ncontent-security-policy: script-src 'nonce-yyi3AZneFoJVzJ7fYWMnYw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96063,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47145)","md5":"fb99fcbaa7b2138471268fe7e967f74c","sha1":"caba72522b91975dbdc5d6349ca5cf9e989cd3ea","sha256":"fbbd86746dca38f9ef9d46b4568e86df5705947f2cfe4bac172c56dd767adb61","sha512":"86da48e50a0925bbc292594bf9e366c1f513cd25fee545e04e1cba074d77adc4c305557a6084da0104faa9f0a69dab11fa7f8baf3d4b6add6843ff0eea7908f3","ssdeep":"1536:y+kgtQfCnu9Hy7ugIHeNFEZ1ECKnsJP/2K+hwlkWYcMt:y+kgKYMbHCst/28lkRco","tlshash":"3493be2291432095dff79e9123c93f78e23ec245325200ec17fe56879e9ada763692dc","first_seen":"2026-03-21T17:26:39.585404Z","last_seen":"2026-03-21T17:26:39.585404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW","date":"2026-03-21T17:25:38.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 17 Mar 2026 06:53:01 GMT\r\nexpires: Wed, 17 Mar 2027 06:53:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 383557\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-03-27T18:26:18.3083Z","times_seen":12906,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/InternalDataspotTracking-CwhbtXjZ.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-CwhbtXjZ.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:15 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-fdd\"\r\nage: 2664\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=K0VMT0Zt3exhLCTEGgftoqCEwjoi9HevmdcRzIXKjXA-1774113940.074735-1.0.1.1-WS7P7g8qMB48NfRxX3GcPp_0E3otlB8TjOo.hgsB5S9nYcaLavYX7puwoFHYPIxyp8yGnq0zqe7qIRNARSnmZooQdrCcaymLriIyMG8XVwfP6.UroqW1YbXzTbvlyfgd; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BvRjQ%2ByVlatEdGS7u9K%2FZfu%2FVkKQBJ39%2FLI9HofUb7Bxy%2Fu%2BhepKNOqUhnQeKAtq1oCd3j5qVTM8%2FaX8cSIFRW4H54xNVbwaD8ZM6exassg9tlE%3D\"}]}\r\ncf-ray: 9dfea838fa5f9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4061,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4060)","md5":"e6501d6c8862a6d97a90d85ed74fe01d","sha1":"f129d89747618d4ff3906dc5c64cdedb38fa4b2b","sha256":"33b71cb4a506d6d28328cd654361c176eb5182f35f87730ac6547db66d7ca1c7","sha512":"eff2e7892fdb17f40b5e9e45327a5c82e65915865d019ba3e80189773fe7d2da285496dfa7565e3014fdd56081f51cf05f2cf453f2de37b86e86fc2be81a3994","ssdeep":"","tlshash":"7381731fd83c05b17064c9ce5977a997c6a83c8e51c0c8f0602a9eaa561be04dbf6ed7","first_seen":"2026-03-21T17:26:39.587133Z","last_seen":"2026-03-22T00:40:17.831434Z","times_seen":4,"resource_available":true,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":860,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-CnlG40EL.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:18 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-101a\"\r\nage: 2661\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=kAQeXE0gVFDXo8F7HMyIwGkwirsngF0vi1hIxf3VJBc-1774113940.0626953-1.0.1.1-XqcLYuZa6W.Yn2DmFdiHD93_TMuTH.Aa_hpEPm_KAyt8BH8YVuBOpr4j1jYY.JpVvqK.zWsYh3qND9TsDokqxUIEeYVZTEbd3JjP9C0QD4W.9JXSCBwILwsvIS1QobsA; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mgvv5c4hK2OTGeHOi1w2YzIW0F937p43fxbKCfqmzxlWsr2eEiPoLEl%2BIKaxJpICrrUjnqQnL4K%2BW90QZWkb%2FhEQzRk2Mx1888gH02wbrE46egI%3D\"}]}\r\ncf-ray: 9dfea83afae89cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4122,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4121)","md5":"b105b9d1c817d1bba91c163aac4581d3","sha1":"c22908ad81be0a8e388a40eb1e251cec4abb6092","sha256":"6e3edc344d0220e455f2aa549e20a36ac03f5cb02ddd01f318d9f7d3265c2970","sha512":"a468fd003fd463ec56511dfeedf72a9b06a95e17f3a6aa9dbef93e99c2444addb4af59cbc7d35300e1fd95c28b8c60b4d88d025b8a1cea8ba2c6862de9769f60","ssdeep":"96:5SubClTBeLPTGNlTJC6YacmDD+oXtPeYFaOatTz8:5bJYE684KoXdroz8","tlshash":"04818617e01ab3fce8ad04a2503f910e377e0bfdd75604e4d0ae09240a7d85af259bda","first_seen":"2026-03-21T17:26:39.427542Z","last_seen":"2026-03-22T00:40:18.100275Z","times_seen":4,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/useJackpot-BDZnzus2.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/useJackpot-BDZnzus2.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:19 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-58b\"\r\nage: 2660\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=jVsyGloMO.lYj8grS7g9csuJ2Rh6DJcqmx5cFVFY.WE-1774113940.111123-1.0.1.1-DymFbnH7g2rRgLMAkU652Xjz.98an1yeU_nsH9lU.Y7lulme5rFmsM1iEQ0hY3qq5iJO9F21me70_m.na5esugm_O9n21Vv.JLiXtzGpZFD4pIGRxHs0vBvWj9V2C26S; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uaQEoeL7n9HYpKFtyZF1bP5sOm5aaqHAB%2BwQZjkNV2C7wXTp%2FCX5DDlc0U2MvUjy8vNWW%2FC5I3EM0Nbd7HekkcIHQ5i0BCgsqJ9nz9fMCDGGnuw%3D\"}]}\r\ncf-ray: 9dfea83afaed9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1418)","md5":"b91eb26317c6780c283223b75661a38d","sha1":"a0914abf4e0d8af2b94ce95c878e0a49ea138cdb","sha256":"0c253d85994a8748550577e8079833492bdfd33a1b82fa7314770e22f81bc51e","sha512":"410c33c726832bb0286d9a569b16e16b35697721b3de1c84f4ed5c67e60a40e5671c281a1a57639c6341c438efc5477beb869b37b08a8f69748cb66dd2830bde","ssdeep":"","tlshash":"46211045c069e5f8f48d8cb10177cb2a1b3c3f7a7440e0a0a0ba5ebd57a8d41b6a0f92","first_seen":"2026-03-21T17:26:39.469762Z","last_seen":"2026-03-22T00:40:17.938534Z","times_seen":4,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/useOpenLiveChat-BqpHSaBt.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/useOpenLiveChat-BqpHSaBt.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/LiveChatInc-BwBeRgTB.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:16 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-247\"\r\nage: 2664\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=83vQKS9icsLS5GyFK4t8WshGa_z7dU.v3paa9jmtg88-1774113940.4655287-1.0.1.1-40kAK.Ll6qx6BQ8vDRzSDNB6INVeUFwmal4cuWGjKrK4SF75lH7CtWO0aIICqN48PjFA8t9vp9.YbZf9U8b20coaLyXNSBFSaSDf13eJlgImLBC1ntZizJ1o8_3Ts4.z; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VvnSY0hibQCo4%2BVkHsES4HpxUmTqfGakx1HziTNBgmS%2FfEJqUmDaMFwmDju58mryhki5rpZ%2F%2FYQKlSbcbm8r8%2FoQr4cpfYXOINXMNL6OX%2FQKkAY%3D\"}]}\r\ncf-ray: 9dfea83e9bb29cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":583,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"681eb5126f2ec9c2aba7812d2e626840","sha1":"9ffe76ca1e901f691ac60faef61309d95902c760","sha256":"b4809c2e970036d0b7d9254d9d823fb9b020c888f18f71ed96f3c22224f9cb54","sha512":"b2dfefdd86cdd501c26c715bfd02b9f1a64a8145710d4acb1e91f57fa2fa4b0db743350947a0cefe3d5913be116aeb6c1758bd8f1cb54f07c8942c7fee79c554","ssdeep":"","tlshash":"0bf0e19e86544e7c81c0ced1516be5f85b3c2ab4300cd851a93b6cc8682484457bedab","first_seen":"2026-03-21T17:26:39.588879Z","last_seen":"2026-03-22T00:40:17.995274Z","times_seen":4,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: W/\"f66e029841759471d2ec78b86760dca7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2007784\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea82a08cf1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22356,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f66e029841759471d2ec78b86760dca7","sha1":"d9db67738984efee3dd63cb144759ac0521c7dda","sha256":"5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526","sha512":"56ec42c707f42339dc21f9bbba6465e75fbfb92c42b4ea180c7f18120e522284b1fa792c63a214fd472ea47f93203af98ce67cc06ac317d945e619e3ba4e87eb","ssdeep":"384:yNDpPg81DH4/8j2CDFmKIk+pv4osVQ37MTNDsPa2vFqrXdCImKkkppDX0skQ3sdv:gDY/mxmKSpv4HQ3YcvEAImKJpDXGQ3sR","tlshash":"83a2243d46a0c3fd9ac5d2fdaf619068904da0ced1f7c74283e6869046e39d9f20d4ea","first_seen":"2023-04-11T22:59:01Z","last_seen":"2026-04-21T22:50:33.538967Z","times_seen":32752,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png","fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-03-21T17:25:40.025Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1\r\nHost: 02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":130,"dns":1,"connect":2,"send":0,"wait":0,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org/sealassets/4d73f24060272c050528b406a311d790-galabet.winwingames.io-486c6ced63392226b7bb98bcb3a47c5e200f727c81d94d94704379de531211a4683f102c172d4031615d4a731a036011-c2VhbC5wbmc%3D?status=valid","fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-03-21T17:25:40.024Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /sealassets/4d73f24060272c050528b406a311d790-galabet.winwingames.io-486c6ced63392226b7bb98bcb3a47c5e200f727c81d94d94704379de531211a4683f102c172d4031615d4a731a036011-c2VhbC5wbmc%3D?status=valid HTTP/1.1\r\nHost: 02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":123,"dns":2,"connect":1,"send":0,"wait":0,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galebet1065.com/api/public/v1/tur/partners/751/components/header_info/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/header_info/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YDwSXSHe%2B%2F0HeO92POVjOyMhcnPCGzU9j8NtaVXppO9yh7RCcAGzUFqkgQ2XufmPhBK7T6m%2BqQvygmQc2%2F6Rg1zCVYAL8sHxE6zbUGxgWdY0qJkRH8Y%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=EMgZeDjZhEXRjWO_mm19.hUHhaDOz.wCYaGdydyRkRI-1774113940.947941-1.0.1.1-iVhCDf4dz5C5EP4bnMdGiGAkVDPy.D2Io5N5mVxOub0M6159xHTDB7KjA_Vq49NkqaSBkG9bwh57YcPdanooAguOoJGQnoCcJnBEDMr6JlqL3MPNdeC_2Ral3_LqW8JN; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8417c4e9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":442,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"31eebc3ad38a765daada564176791ab8","sha1":"4ca49baf4c7ac30b244682db5d5d21bd6f555767","sha256":"e7a880dfe8126f315ed8dfda559672fd8c4a74972a7a1b2fa252c02a415365ca","sha512":"801c4a6ae61106cd113c1c2bcc26da7f2a7282350347606961bd6396a5775e6dbf27ca75626f95cc30ae1887971248885746b4b6cd46db603a2e1aee45af4266","ssdeep":"","tlshash":"e7f0dc36972ec52467504290c04f383a185e028cde00ee6c999dc37084e8379a1220a9","first_seen":"2026-03-21T17:26:39.590565Z","last_seen":"2026-03-23T14:49:47.305223Z","times_seen":7,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"go-cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_e2992c962b629258e32496488e343bb8.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_e2992c962b629258e32496488e343bb8.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18922\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 31 May 2025 11:53:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"683aeda7-49ea\"\r\nexpires: Sat, 28 Mar 2026 14:35:58 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 10183\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=BtWEv3PO_moRSOBJ_f5SPGfa9Ny4MfY2NVlxm8BLQvw-1774113941.5840359-1.0.1.1-OuLooDvt1Q.D7U0m1PfHkiEbwLXiC0ttTkcPbBtsKiWI6suqSAlmLG2BRZ0GynBOvwG0nlpNZgQFayf0PlfDiN8F1BW72GVZf569Wah6aJOrM0OyAHuEw5lsND75qIYA; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvUXlrGmQcJqsHKT4%2B0WXSAygyvVd9qExz7gMJdq8Rd%2BM2gyPAlsKHpNLJeAMD%2FPLemUBTcAr4S%2BFsf%2Bj792cdLTS4BIDwb0zBL3LXQ8avM%2FlBKOLA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8452d4c9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"903c69c562a0cbbf1c19ffb312754ab9","sha1":"6b4ec5970d79a6e68c3452ed6216390060838a25","sha256":"0e4d56e0eeeba1be555347bc03ed2125cb792ae75f2ce14668b360230c341f18","sha512":"5b6ebcac994b2e1c2544a910a711bfc046d701704b371d62732b1754bafa403e5486b91eaafdae875d752b7e3122fc33e7f22a463e581b4090d2779f80ce34b8","ssdeep":"384:8Iy4zvEFK9vUhGAB466Z1W042wifdTAyYQiai1i23xB:fzvEw98Q44R1WmwifdETQiXDBB","tlshash":"2782d0a6787d1671ef46e14583b883de87210a0d9b91878d1f18a420dd3d72ecab51be","first_seen":"2025-12-24T22:39:16.347068Z","last_seen":"2026-04-21T21:26:35.660181Z","times_seen":33,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/940.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/940.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1096\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jun 2023 13:09:28 GMT\r\netag: \"962f71a54abd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 19 Apr 2026 09:58:04 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 113257\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=sQK6BKtaY9GGIt1pVF7Bg4lDvRPM_8KoV_Sad398W3w-1774113941.6098678-1.0.1.1-k9jshqNe9VIT1kreRkw5YmU5k2PJOEIkOHErWr1IyNI4IfailXJzGEOLMuMMrOITE9eyYU0BshQN47qxqBf53UWuBJoA85oi5VnEm4PdyjVb79tkyOC1Rk6f1oUvynDt; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VsoqSaFGuyTpQbCU3NkRkkbkMJF3BOSuSGp7iPj9FDJWt%2BvwmfoaN0UKsMjCH2%2FblGc7ztyQ9jCEFmnP8XiqD7HAaVafAB%2FOXlm20KEjUbRhiyWRutPdqOfn9Vo%3D\"}]}\r\ncf-ray: 9dfea847085b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1096,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b2aa4e91f5f156e42d8fc97ee2ff31b1","sha1":"0c5679a6a43bcf7a888a48e3626e0b168b5e909f","sha256":"053b66086f8bd38d3c3e42468d9e3bfc14f3669db492640b0e6de40ed71f67d7","sha512":"befa60c1ee1ea2bd3bf11a91b736aa100cb3bffecd3e4c55a5b5a19753802c35f834106de812219da23862cd846332f5e56ab949606dcb1ff40ad2e52fbb3746","ssdeep":"","tlshash":"9f11b6e1c242c83486ac3cc7b15550c7df2e43ef2955608bbe94ef186469da3558e990","first_seen":"2023-09-23T15:54:58Z","last_seen":"2026-04-19T13:12:16.915809Z","times_seen":256,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/getLiveGameAdditionalInfo-B63DAlG1.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/getLiveGameAdditionalInfo-B63DAlG1.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-47e\"\r\nage: 2657\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=O3OjqVdz2RMe4VvnOYcAYp3zi7bnYCxFA7e5q6rw3ws-1774113940.889188-1.0.1.1-tV707.H1MtPH1udtGc_DKm4l4ZdxI5BoxLbCqbE3oz.mBcGuwzdoTKgFUjYyrL2eaExWGlk2FoK9rhOvs7CfZJ0MdJPtQLnAS9moKY2rsF2WoYEXAprHBIvjSq_dBibj; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ORJyvXEH1WO9ieZpLRWimWnmu%2BVm2aKb7jXkTli9nyML%2B1Z6ek%2F3OWWHqWpV%2Fiosy4IXstrtBQ5%2FlICuBLKNmSnPMepXmjiECmH3VzAFRlOoCeI%3D\"}]}\r\ncf-ray: 9dfea8414c439cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1148)","md5":"81ebe665808459b6972bd41e409d2812","sha1":"aaeb597dde98ffa62584343db6067d94ead9998f","sha256":"7009459d3d46221c69360e4b75900b5915e58f769e93042ce6517ee95c856afb","sha512":"5fa482fc2763c005e76333b79999e5a4115fdd63a3472b1328c7700eff2291336c84f4f12715b6a0f2f91faa6ee1fb363bfe313b6edc5ec36ca16740d5b12acd","ssdeep":"","tlshash":"c72114b6707e92bba5d94d9457b01b31e2b5ba05384485ccbb3cc91918774c4a7e203d","first_seen":"2026-03-21T17:26:39.478099Z","last_seen":"2026-03-22T00:40:17.778154Z","times_seen":4,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/391.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/391.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1847\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Dec 2018 12:25:16 GMT\r\netag: \"9126d411a893d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 11:27:43 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 194277\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=eBXLGB6ogrW14.IALmtRZks3Eiq5KesMifqF.CueXE4-1774113941.6168685-1.0.1.1-V4Ox6H3whp419mT4jQ1BW_3UBvKXkc7f56lkg_iEQM1r656t2iXi0bb5ASzMRq3Qn1L75JcjvofQ_kz5GP6pTYwKY2loPcPYWiq4345NY5ZPH1smWjuJTVvKKftBI7eQ; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIATNKPpvnXcxzj1Oc2VxJqNFud9RA9ktKKBmxx1wZ710nFfyicfKscjj4IWvYPnN%2B%2FO%2FUqeJFjsVpHVkFM4vk%2FlGpRtUNzWnIoOPuLKhCylXTYSZs6g%2FXDpxNA%3D\"}]}\r\ncf-ray: 9dfea84718b95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1847,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"2044c9bdedd3477dbcfd746671ab89bf","sha1":"6e4606219fd5711053543ef8f0a7ef3d18dc36ef","sha256":"237383c1ccebb7fca070372ab85328493665bc0867bcbd1414d03b1438d371a3","sha512":"9ad2af471c99d7878fab296fc0023b83e25974092a1031cca242b95faff788487f3ac4d1bd08f14de0e47f739a7a8fd7b31e95a48219708d05c9db15d76fa581","ssdeep":"","tlshash":"8f312b93824d35c9ab014acedf922104c508f7df05c1dd09eade03d48b49bcc1ba6f12","first_seen":"2023-05-28T18:20:13Z","last_seen":"2026-04-18T15:05:24.776135Z","times_seen":401,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":28,"dns":0,"connect":3,"send":0,"wait":22,"receive":4,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea818af880731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-22T00:02:58.072339Z","times_seen":76937,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://galebet1065.com/\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-ppsd\r\naccess-control-allow-origin: https://galebet1065.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Mar 2026 17:25:35 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9dfea81d5e571a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-CUbLXDx4.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index-CUbLXDx4.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-466b\"\r\nage: 178\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=_NuXxxJ8sGfYAaUpKMNHtybekFd9s8_YSn7itf8rdS4-1774113936.7509916-1.0.1.1-GDaFBAWT_Nqmz8C8kJ95OpCre0KdXD_2OD6iHOw34GIqoG9FcGA2F55DjWHXLfBckmpPrWTmgS7m7aRwmVK8dvn.J_CKtsxw8WBsp7Il6utbcBcc5MNwD8ZUjwTwCZoM; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJATY00Xh1eLew5lmsIBg5N%2FzebzyS4Gri7QMY283ddLzLOL6Qo7YVht5G5OpngEZL8kBNwqbDN9rEGNfARc3%2BHurxRZ1OQczEiNA%2BICGus2Zyc%3D\"}]}\r\ncf-ray: 9dfea826ff489cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18027,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17806)","md5":"f6345e5eb50070d1207ee46af95b1cf0","sha1":"8f5cfa73b1aab00daee26489e596300ddccf15f1","sha256":"ea360197e86b31d860efe7abfa07659d673d5508072c4a9f9494a0893921c804","sha512":"99726a9e011902acc4873e4538ad29c6b47f34c6e64550a2d9d37c97ee22c9d772544d3f33fcfa9c6eb16cfab541e5ac981fa61b9875a8bf8b54298bb4e6df05","ssdeep":"384:fvMci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJ6:XMci408FFnJrIjE3D/OY2E0xqpc1NKkT","tlshash":"818209d0e2b4f7a642e8aadd80392074f2208c2c347dd0f1b6b6edd974664ca956dd37","first_seen":"2026-03-21T17:26:39.594746Z","last_seen":"2026-03-22T00:40:18.08786Z","times_seen":4,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","date":"2026-03-21T17:25:38.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42572\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Mar 2026 14:21:12 GMT\r\nexpires: Sat, 20 Mar 2027 14:21:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 97466\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f85ea9249eb9545e59913387fc758490","sha1":"634c279c5a8f4484b2ed12eb314b72d1b9a650c4","sha256":"f185130589517d6b00eefbe9144c50320297d37c73792a012cf2d7faebe233e7","sha512":"e02abecb04f2bf6cb2ae4238f7aa36293f6ee36690f45d2084202392bfa5a70f7bcc7307dfce0d3f9d22ef65da523452f8646e267e695c052dc389e33865ef9f","ssdeep":"1536:K7Rpgh9C9ToL9gTNfWNfK4RxvDldthXwW5l1Dx7:K7ArC9ULiTYNC4RxLX1","tlshash":"29838e7338913a1afc2b8b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-03-12T21:14:04.643151Z","last_seen":"2026-03-27T18:21:46.942434Z","times_seen":10797,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index.es-DXJtvHoT.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:38.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index.es-DXJtvHoT.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/WagmiConf-B0zYIpvp.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:01 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-48144\"\r\nage: 2678\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=WZFUec5QQ1MB_ZUc6xM5ho6kQmy3UTlPSiD9JCFhzFg-1774113939.4455583-1.0.1.1-jcEzZK6Nziu2ncOtPASRgRhVnxKnpLUjm2PkHkmL7XKcqaA9LAgifsCPY08CWLSGY_y49Ua.ru3wabo7_4IKB2H3HYPchf6GPnAs7gDBK9lz_vGoikZK4Z9uuEpB4BxS; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iR%2FfFVpUQU78cOCa8G1j9zeiLqOhi7fECVQBvywQq4a20H5omp1k6srbIkCAZv6qCw8CYSJwH18FQXrMpuR881C8YfPf%2FXhs2Oe9eimD1bgZ11I%3D\"}]}\r\ncf-ray: 9dfea83449a29cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295236,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514)","md5":"7f5a29e9b140d89b45ef6c2dc1458af0","sha1":"d3d5fe3e4254d00e2b6c0321d24cade44f2359dc","sha256":"7bca838c2ed01b7b467f932df8f019f4ce70b01e018595eb6e01f08a1c826261","sha512":"74fd665894507bec47587bfc1fa7e1356b66e4b0efc0ee8bfeecb69331bde3cd559aa2583e98d0065525a79b28fea6568904e71d580aa5caed815377063d9703","ssdeep":"3072:AzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6Ubh:Az77jdU/7sJJMcvYisoljSFN1Nd6Ubh","tlshash":"c554fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","first_seen":"2026-03-21T17:26:39.597293Z","last_seen":"2026-03-22T00:40:18.118105Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1126,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/pageBuilder/pageBuilderHeaderInfo.json?v=03/19/2026-17:16","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /pageBuilder/pageBuilderHeaderInfo.json?v=03/19/2026-17:16 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/tr/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:25:39 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-11b\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=7glZKrozJv8dYHgdjYu41RgSDHSc.9pOry99RlX5h5o-1774113939.4340127-1.0.1.1-lUsIZpQ3DqM0jChMD8MV0PlEd.x4U0i4YPJeQSSpbnq2DcZuv1NKrEKmD9ZCiuBtUPKAxGUTS5QMR58wPCD4RdNMH7_KjaBO6.pMxatIvAgkGE44fsia1yT_fWnyMvTS; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRbSfgaEc2W4MXNUmXuK1iilPw3xlWPbgRVHQSILrGVxiXntOutXYoKABiaJ6K3GmHdPfaNpuojpXjyYHEf7nsLjaeKjW5dQS8X3gC8KJPgYHNY%3D\"}]}\r\ncf-ray: 9dfea8381a1a9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":283,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a073ab68d03cc285a2ea057683b697bd","sha1":"85214b84cecf1dcad366f847f29f079e47fa4f6b","sha256":"22f8711fa180f3491a16949412c0f771411db6102c183564c592ae3bcc59dac9","sha512":"526285a76199b4a6719d986101a3ebc29b0ba3457af765836b38ce24ec8170528f62c647e3b7acc85f323b23634f3ee1dd05032de06798ec969cd0c7c4dbcc1b","ssdeep":"","tlshash":"26d02b3aac00ed7473d4d413d29067802040a409d744485c9cdd9f6fd3ed3851091b57","first_seen":"2026-03-07T12:53:25.048544Z","last_seen":"2026-04-21T21:26:35.712663Z","times_seen":26,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/AppSettingsButton-Z8Uar99K.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/AppSettingsButton-Z8Uar99K.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:10 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-181\"\r\nage: 2669\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=hPvl.Aku7cqwpTAO7gjtVOtowsgS2u1OU3DEH04bny4-1774113939.5587466-1.0.1.1-EIX9wXGt4.xw06oNAa76NTt7xW9q06Lk1eRWlixjYNHUfN_9Ot4GGNB1aWt9jpWu6SRdOV9X3oTNI.miPYUSVdJpBYKqGXwBfNsv24IR0CFO8cc7omNttaNf4tMC4X.b; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dOs0xWDeXFkd0S%2FixhnloYoOvzuZFqLpsMtp%2FYMKru3D4534TJCIdoszRclHTIntorgSgJd3wl1lbmg0%2BBOKthrIY3EVfQRnAwTZxbQFFl9g%2BkI%3D\"}]}\r\ncf-ray: 9dfea838aa2f9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"89a30a627156dc5f5d2c27520b8dda1a","sha1":"7b42b5f3a628661504fb78adb51f204d573e286e","sha256":"622f3d41c1979a9d6e6856504b9bc1c5f1afeb02f3ca7c0299060843da6d581c","sha512":"46e969cd79931186b55227bfec7a5bf3eaa2f2a2538d294727796d70f30f17591ee2e676ef5695a2b5f163073d8124911f6257167d7c1c16baa75bc2e666e921","ssdeep":"","tlshash":"f5e0c08b91c2d2fb07d27ed1c11fc50179267c38d788d94140bc649176f02c6d14ea6f","first_seen":"2026-03-21T17:26:39.599828Z","last_seen":"2026-03-22T00:40:17.805928Z","times_seen":4,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/392.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.431Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/e/s/0/392.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"eu-swarm-newm.galebet1065.com/","fqdn":"eu-swarm-newm.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:35.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-swarm-newm.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://galebet1065.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: myeigNKma6ssvO7Htly4EQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 21 Mar 2026 17:25:36 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Accept: Skv7VTylCpQbyKdLfj89aO3m9zo=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\nVia: 1.1 google\r\nUpgrade: websocket\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cf_bm=c_wILHw9byqvvRodehbLloEwrSH3AvDeUF3zw1WZDpw-1774113936-1.0.1.1-hWf.AcyuG.92CK.HXC9dehly5AxTqRmRZjV0E5K_.Z000C0AcW1aDkhk24VyHw8aVH8Eq.cg0Rl3wjA9Inc86Va2_PX8whd5Ljov3vjaLCc; path=/; expires=Sat, 21-Mar-26 17:55:36 GMT; domain=.galabet1060.com; HttpOnly; Secure; SameSite=None\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xGffT3aZROIGkgnVIXEG6yw0JVUvuRG7AculARE9vK85Y6MAwLniwqAD7fzMCm3J7X9SfhuW2SaPs7KwPP5dk0sRkzPKVdjXY4TSuA5fYfs%2F7ZRuUJuwB4S57D%2F1S0UEGsK%2Bcf6HfhdLIeDOT7Zpag%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nServer: cloudflare\r\nCF-RAY: 9dfea822fb284eff-ARN\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=78823\u0026min_rtt=78359\u0026rtt_var=22434\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2835\u0026recv_bytes=1298\u0026delivery_rate=36318\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=1133853c67261412\u0026ts=157\u0026x=0\", cfL4;desc=\"?proto=TCP\u0026rtt=7863\u0026min_rtt=7833\u0026rtt_var=2256\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2357\u0026recv_bytes=1170\u0026delivery_rate=363590\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=a95c8fd914e808b2\u0026ts=506\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":0,"dns":40,"connect":47,"send":0,"wait":497,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"eu-swarm-newm.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"eu-swarm-newm.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"eu-swarm-newm.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"eu-swarm-newm.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"eu-swarm-newm.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/favicon.ico?version=1773926203584","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:37.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /favicon.ico?version=1773926203584 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:37 GMT\r\ncontent-type: image/x-icon\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:34 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-1b67\"\r\nage: 183\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=cRIx4gK3T2wk1DI5e2AoWbd22Yv33nHTtSj7G9pP2Ns-1774113937.7880604-1.0.1.1-95q75mqHlWawR3Xj_suUSuGFF..VxTEi.K7AJYNHRTlvXjGU9QYGG3FG4mCcBrV878InmOQye9b5_XtIXYi6dczfYuxGax6RBKK_Ee1eyKrwQHykQ6UqM1whbjVGfd0d; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lT%2BHDnlQAgBGifkWwayBPRTCEh6%2F6dvuMpIRZ7l1Ababs2KXjaVSqee9DL%2Bp2fQUCgc474KZ838sV0KzzFyohPaP3H5tnOKD0Jf%2F8C8PF741ht0%3D\"}]}\r\ncf-ray: 9dfea82d58489cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7015,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"96a66de67adef28337580739eab71404","sha1":"2b93f9d9f5ccb809e454e812f9dfa7ce9ab02b0a","sha256":"1b029ff1969f7f867742ed30370ab8f76f58f3a00c102b51740cee61a5bae6ca","sha512":"efd763159644683e2aedb05be3a541cc4792938d3755e0b0a1e8850c6240e04c3ce03e465ac5160ebea03b7ba0e9a948bff584fb163ab1db1677453bcb13a7fc","ssdeep":"192:AA9risdBVS6QwidYsQ6ujzwAzxyKjuDqc:AA9pORYsKIAz0KjYqc","tlshash":"40e19fc31979540617e9f2df05c4386ab74ca88793a2a4f927b931343ff19cda613229","first_seen":"2025-12-24T22:39:15.963833Z","last_seen":"2026-04-21T21:26:35.600086Z","times_seen":71,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":412,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-BnlPX2hH.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:38.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index-BnlPX2hH.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:00 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-26774\"\r\nage: 2677\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Ll8A.efaS_zS7JGb8ZxRivzpoyPEm3mlo7y6EGWf.Z0-1774113938.9006555-1.0.1.1-PvGygtU8WmywomafUxBjpgp3SSP7EWwB0NnXszPr210oTGbJfMNd1caOaBItDywWiUUMIOUkwirlJKVF_vSc6Xv2V.JL9UAFw.wd6Owgt8gYoues93P0Mm_QfLLgZkGY; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6OV4KfjCIeT79KFdBa4YidywDK9GsGZxhwSzMNkBronE7KWJJhFUt75JIYQygp8O4fSK8qP29rfaI%2ByWmhj2xrm8Ndoo7l9dbLxKbSCDtm3yYUg%3D\"}]}\r\ncf-ray: 9dfea83459a79cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ceba5fdbbb3a97901b9dc8c2ad5b13da","sha1":"34eb6dde8211dd82b04e0b064b89fd42c9347721","sha256":"ad91370fb603d1ae1fb182b1dbc011d8371c2d98850658bfdd0177eeb6d693f2","sha512":"e971aa680fdb7fdcf8ac304ba0062cb5cd618a9c2b95eeff80250378e39441a1e4098440a3c80ad3f6d6e0ee54f37e54aa74ff34b2f200af61b68f72cdca9c45","ssdeep":"3072:mbwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:2whFHU4HNwFH7MoOWexZFHV","tlshash":"02f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-03-21T17:26:39.513457Z","last_seen":"2026-03-22T00:40:18.06025Z","times_seen":4,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/Firebase-diKvNL2_.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/Firebase-diKvNL2_.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:08 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-1487f\"\r\nage: 2671\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Hz3QL0IJ7SS2lhE89h8slX_Q1Nd_DKLd0IdKgOIMeVE-1774113939.5987215-1.0.1.1-ip8OTCFrl9Tio0e0ic9wbOf.N59Q5l70N870lVqVfK2XHQLC60QamYl6gkx2CXTIJRvIhdvD4uXyOOKXSZ9tQSVRp7PDoDliGxa0..07KknIN.jGuzLlG1wyY.yObdc4; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jnhtbhywgjeGrFeaZSdYkjvhsQa8etUA29pC7Ez5eDvoaueNhZ0bqWkN3f6wKjS2PeH5zJrVqQImwDvTnhYbxaYKypEPbq18IzYM7BMFC%2BkQ9h0%3D\"}]}\r\ncf-ray: 9dfea8388a269cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4779)","md5":"a9c96b15207b33ce41c266eb191479bf","sha1":"f3a296de9fe8c5443c223461091bdc8a52c0b6c7","sha256":"a541d121f4449536a19127ae7c01559eba206cc71f0498a5a1038437a937ace1","sha512":"2ace56c3aaa190691316c2d9469f3a2b785d4b8de5cd20f39fd17e9da4275c2b33f4fd7fae089cc692004d9066d45af1f0e3aa0e3e4affe9a7c3314522077e35","ssdeep":"1536:s4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:ss1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"8e83957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","first_seen":"2026-03-21T17:26:39.602259Z","last_seen":"2026-03-22T00:40:17.843659Z","times_seen":4,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":527,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/GameSuggestedEventsWidget-DZ6HUrEn.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget-DZ6HUrEn.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:11 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-e8e\"\r\nage: 2667\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ko5EVKCNrQglrJH8ywdGeEUgJr1AW_mGNZ31UWZb0o0-1774113939.5880544-1.0.1.1-wfxxaK97qE77tZjhHr0gX5G.531mX3a7ALi5yqR_8_J_xRGYiRsRUuIizfyuZ.YgDEG3tTxfqec2KoRAp.1_8Br_4WtpQqvLyvs4J..PBn7SQt1qT_39.QWvJEWh3EuZ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjIEg5WGs%2FvUsKarNDFO0DZ4utsS7IMbERw9l%2B779xS2QQwLGlcpI%2BqyZS%2B3rIrPjBxtwdP5uqqdwfz3MT45A4bTyq7RQWCszmACh11kdIz%2B3BU%3D\"}]}\r\ncf-ray: 9dfea838ca369cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3726,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3725)","md5":"ca5db02ec6d235cd64de2a6a474f33f6","sha1":"25b848c932d6face1ad43177f53b1d3032b0fcfa","sha256":"adcca01c8b00bd4e28badc2e707aaba8b035f40cc8d4ff239e7ae508dfb79349","sha512":"76bfdfcefe35441f326e410aaa2d4a801c423edab5c999cce894894adf9aad5eb6ac478426ab9ae2efcbfbc3e97a4f75744956a2b800c1072d9671e4b16c19e7","ssdeep":"","tlshash":"6c71d75ae010aa39a13745d82bef3119143632b8b94353c1b73fca7123e11916b5bbdf","first_seen":"2026-03-21T17:26:39.604297Z","last_seen":"2026-03-22T00:40:18.192831Z","times_seen":4,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/InternalDataspotTracking-CwhbtXjZ.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-CwhbtXjZ.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:15 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-fdd\"\r\nage: 2664\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=58Wsf89.UB_aws1VF1IOHHNdx1dE_OYCYoKL24.0V1U-1774113939.6922376-1.0.1.1-x_I5emJTJehQMJ3zq3uyYCwvF8MfHr_sXCfCVVnbBcUirRETzKjFmG8fTFzV10_pY5idq_SQ9fnpfXyYTF42cnYY07UxzJhIZLXBV2rE6OsaQTP5vhN2qO7sUHtNUCrB; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0ErcD6ln9EOUOITShCVpyfsb2D%2BmB1rc8bM9vJL9D7%2BtBpwKtSyt5gNStzS4yPWATRpObHEsq1%2FBvpYG%2BtjPxSsbxyMIUs50bgWUtgFzZDEn2U%3D\"}]}\r\ncf-ray: 9dfea838da4b9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4061,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4060)","md5":"e6501d6c8862a6d97a90d85ed74fe01d","sha1":"f129d89747618d4ff3906dc5c64cdedb38fa4b2b","sha256":"33b71cb4a506d6d28328cd654361c176eb5182f35f87730ac6547db66d7ca1c7","sha512":"eff2e7892fdb17f40b5e9e45327a5c82e65915865d019ba3e80189773fe7d2da285496dfa7565e3014fdd56081f51cf05f2cf453f2de37b86e86fc2be81a3994","ssdeep":"","tlshash":"7381731fd83c05b17064c9ce5977a997c6a83c8e51c0c8f0602a9eaa561be04dbf6ed7","first_seen":"2026-03-21T17:26:39.587133Z","last_seen":"2026-03-22T00:40:17.831434Z","times_seen":4,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galebet1065.com/storage/medias/galabet10/media_751_81a0a78176aca202a6413bca3746cd67.png","fqdn":"cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_81a0a78176aca202a6413bca3746cd67.png HTTP/1.1\r\nHost: cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 13516\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 08 May 2024 11:53:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"663b67d2-34cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 9725\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=rB8DeSlj9WcVuokR9umnpimcNtBwytjys3mJZuLQk20-1774113939.8341339-1.0.1.1-B8XXK.DEZEoz2TyRoGwCGczw4iJs41vnGwJqF9zcZgBFaEBdEWX6Cmm94LS7CMhoTIY70TFQU_YBJROk0wTcPX6AAfKkBFmFjl8C5YhJQOY0eBJ_ljAFZbtkPnil2i4C; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WATaJLkGQdAW%2FgtychFT4tIEKVkHdzEAXNaHU%2FOwRc6AVykY%2FxZ8uVjB6%2B3hhDh6Y41%2FUAoeuWpEFHTk%2BWEuRVB3qLjspq%2F0KFK8HUZiqdQhtWg%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea839aa7b9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 340 x 340, 8-bit/color RGBA, non-interlaced","md5":"9fdfdff5cb870c3f0abb6cc44f262bb5","sha1":"c48fb4dadfa4e6b4de69ec0e7e02445057c7e0ca","sha256":"308a8c0f3d3f9792d26ea2d84bd633ff1f490ec83375b1613d29c0995f8b740f","sha512":"39264153a485e22fbc442e86234ce24863f5bcbfcd47cad34f5afc8715946825fc705491b2ef888295f017d98f393c44fb28428dd05b829327c7ed38db3d4b19","ssdeep":"384:CvHjxbUGUk1+EVWqPDks5r6BU+xND3AU8h:CvFHoEVvaDsh","tlshash":"6852d0f0ae72adf08ab16c81539d8d1e8473de7ea5913f0361f64077e64e40d390a4b8","first_seen":"2025-12-24T22:39:16.288188Z","last_seen":"2026-04-21T21:26:35.718394Z","times_seen":34,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":591,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/CasinoJackpotPools-fAp_tFNt.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/CasinoJackpotPools-fAp_tFNt.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:20 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-371\"\r\nage: 2660\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=VEshb2x6uzxZv581l2SoiStbZg5wR3NUgQ1O4dNAQ1s-1774113940.8026538-1.0.1.1-4KnN_CeD1YH1CYSZZnZ5B_556PwU6pwMzj7bwGtu3CTScAH6CNaKgbEopj7v4.3og8Hx.JuHoxRupKiig1x91_H6j0SK3MMo_9hq1IxUzNPu4envVuZoNm7iIKfGVhLX; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mS6YOG7hpr5%2BThHZOuZOztFc5MOi3Cq8BECLjAPrNU1tX7FMrYVlxrkqn3aOR3jF6D6m0sHBSTnEs84MQOQ4fF%2B2NON6GUrQmbqggHd%2F86LtReQ%3D\"}]}\r\ncf-ray: 9dfea840cc1b9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (880)","md5":"5918d349ea75aa702165e8b092d3b0fb","sha1":"753be348a9b1bd9cd842c8d6a3df0ecf613f9226","sha256":"7a95ae3b8b2ad563cdfd333ee422aefcf2307238e68e01fc031003f559450718","sha512":"de4df633ef185ed57d2964b09d2bbaa88b47a08b90463bfd9677bb3c6bd777f4961ebbe889a80df9636576890ff9d1bb27a2e052618458bfe4b1960a5e9fc248","ssdeep":"","tlshash":"0211008bf02bf3f4c88c08e14079495a073e2f7af71181c0946c5a285b66847f5a87c6","first_seen":"2026-03-21T17:26:39.606633Z","last_seen":"2026-03-22T00:40:17.962048Z","times_seen":4,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/lodash-kwDFPdct.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/lodash-kwDFPdct.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:40:40 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-28615\"\r\nage: 2693\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=E86nEzXf68ywGFfHTwIeyNTWh__mkFfZ18YfCGx5g4M-1774113934.2234118-1.0.1.1-B0uOTwgeX8lUN42a9fB_xJUTOyAOxZFvQFSwMFzXsj8ECuIOO9XaoTiQnDRc9ap4iJGirwLYX_p2k1l9Al.CyMrjcP5MTD9LR7F5R7j9aI_kCVbGEwtTO2iIzMtSOfas; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKCZPfgAxAzix%2FGUxO99Tj6lAeKPM4OuJ755arCdIWEtOPFGZARQaRjWRLatH0a1uJxM7foyrKlIYBCmTzQMKdN2QPc%2BV%2BCBVC4sIRRbPynI4bI%3D\"}]}\r\ncf-ray: 9dfea817bcc19cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":165397,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35467)","md5":"12e56cd99d8f0069e4ee81a372fe541d","sha1":"44e49f0b5438f713c4e9cf76e3659a00ffd35e87","sha256":"d77e40234c5d8cda5978d85ecd94a77ad1231619bf0b371d67fb2f3074e96425","sha512":"69908919839d062f0d861cf4591600c01193ccc7fd4438009bafeff34258217d381b6581a2142725c495a3a1bdf7937964c90108d0a6fd6e01ce2b90a854e9a2","ssdeep":"1536:RU70QnXcPZMTC7X/7crNuU0OCbgjE3mhgELujQjEO6epU3nddIIBQoMbPDFLufvn:RGc+rh07XgLujGEOtbavkeLkDYlwMh","tlshash":"74f391c835d7f4a183a7287440bf084bf23ead65a84cc550e1aae0dd7db8919c277e6d","first_seen":"2026-03-21T17:26:39.43969Z","last_seen":"2026-03-22T00:40:17.967811Z","times_seen":4,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":448,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"vsa137.tawk.to/s/?k=69bed4903ad4812025bf715a\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2N2EzZTc0NzNhODQyNzMyNjA3YTM5YjgiLCJ2aWQiOiI2N2EzZTc0NzNhODQyNzMyNjA3YTM5YjgtQVJhRElWWnJsWnJwcVF4dnpmNWdwIiwic2lkIjoiNjliZWQ0OTAzYWQ0ODEyMDI1YmY3MTVhIiwiaWF0IjoxNzc0MTEzOTM2LCJleHAiOjE3NzQxMTU3MzYsImp0aSI6InAtak9fb01pcHc2UVZSdWl4MUxUaSJ9.ut8ubaDONfXwR1zSxD2ZUhx9dwe7It0L2BuWM0jDuRmGh4SXLbMcqL1dDgl-WMaTb0uGKfNSfCh70KoxuWXLMw\u0026EIO=3\u0026transport=websocket\u0026__t=PqHRbN0","fqdn":"vsa137.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /s/?k=69bed4903ad4812025bf715a\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2N2EzZTc0NzNhODQyNzMyNjA3YTM5YjgiLCJ2aWQiOiI2N2EzZTc0NzNhODQyNzMyNjA3YTM5YjgtQVJhRElWWnJsWnJwcVF4dnpmNWdwIiwic2lkIjoiNjliZWQ0OTAzYWQ0ODEyMDI1YmY3MTVhIiwiaWF0IjoxNzc0MTEzOTM2LCJleHAiOjE3NzQxMTU3MzYsImp0aSI6InAtak9fb01pcHc2UVZSdWl4MUxUaSJ9.ut8ubaDONfXwR1zSxD2ZUhx9dwe7It0L2BuWM0jDuRmGh4SXLbMcqL1dDgl-WMaTb0uGKfNSfCh70KoxuWXLMw\u0026EIO=3\u0026transport=websocket\u0026__t=PqHRbN0 HTTP/1.1\r\nHost: vsa137.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://galebet1065.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: JRbQnnbwN49+i4YEpWfI8w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 21 Mar 2026 17:25:37 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: H/7BbmsGhHJhBkpH3DGzjhpdeNk=\r\nsec-websocket-extensions: permessage-deflate\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9dfea829b9f21a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":0,"dns":18,"connect":19,"send":0,"wait":464,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/ButtonWithAction-DLXWMp1-.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/ButtonWithAction-DLXWMp1-.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:10 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-10b\"\r\nage: 2669\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=2fi3wpP8Q2X8VrcnA4BjB2TmZrcYeLwXGfthjo0AiAY-1774113940.0342596-1.0.1.1-icRiCzv3MBTXy1mZdeg40IcwZD8DC_g2YFWB3ddByVbKtd3.84fEbEGeh5dM0SUNyU93tbDEpiJO5HY8ppmIvi7eplAy4m5X3P_ZXjt5m9MA8JsPHGKkRggHmos3npw.; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nc7dNL8QGG7FRanggplamekvf%2Bf3DEP8GGAfuZ131Mc5lPeJp1e0aZJldifo9wbQ4FSue9%2FLVDLYxG9gkc5LaI9rxtIF0mCaUSj8W9AwMUlqzSk%3D\"}]}\r\ncf-ray: 9dfea838fa579cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"2e89d4b67c0ce532f32cec3235e50823","sha1":"cd66782d133d21562bde53ab4bf77c8e3753728d","sha256":"d8c3af745c755279a4955eb849c11298796114efe59606016a33e13402edc40f","sha512":"909db2d090af51aa3edd713ba8c6171b576535f7507409d5af21c8735726120f3812da1c036c9d58f717c15f4dd2b1321bd4ac4658db2883c6ad48901aa138bb","ssdeep":"","tlshash":"0cd0950f5451d1f603c5fdd0a22bc41139257d60f7c4c451804819403b7179dc11ef2f","first_seen":"2026-03-21T17:26:39.607991Z","last_seen":"2026-03-22T00:40:18.009198Z","times_seen":4,"resource_available":true,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/GoogleTagManagerTracking-DAQdr4EP.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/GoogleTagManagerTracking-DAQdr4EP.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:15 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-4a35\"\r\nage: 2664\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=AMCiDfQP.13akf.DtTUZnbk0kh8YVMrE0PeI7UUH.Fw-1774113940.0872626-1.0.1.1-uMlMcR7ahSoFSr3vhGVMRfWsAkOHghzTyYNcFG71mQepEu3prjuQjOCZF4UuHS.SXMoakNTCtXdNoG0I6wexvpiIpn9jcbWeIgX2Ib0J8EKqo4lTA5Aq8RtWY1sFkGb8; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZ9ilrQHNyvK0zOocXSS%2BbBdbpssPJCbVGUln2u0O1SYKqRSlO9Qe%2BngtX%2BiSwD0tf6aRvDUSB1bjCcxWy1pUsBPCwRbmqh3vKSP%2FpfPsTW%2B6FM%3D\"}]}\r\ncf-ray: 9dfea838fa5b9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18997,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17701)","md5":"1851f665ed369b09c168336a0dfc7620","sha1":"56104bf45809c75b4adc2c608aefe6cf8b84bbb6","sha256":"278a0f52fbce8ceed2a9b0a736b6ad7b2d4229c55e7546093d62a9a550d265a6","sha512":"6c441232aeb4d969ce40dd487a293f6a0efd543b5a5f92bb46af589c9487f433f660a280888d7fa139778497f08bfe7af278653166345a79197242731ceca54d","ssdeep":"384:db3bEI5wTlaZdtdoNc5GRU52iWD+FOTVKWZxxqyuQPfg1F0TQOmJNw9vU6:l3bEeSEDdoNcwiAiWqFOTVJZnqyuQPwU","tlshash":"6182b9d7f96548e0a5bc1fe81f92428b35b1b669f48140747c9e7c0c233cc4ef2a5a99","first_seen":"2026-03-21T17:26:39.471571Z","last_seen":"2026-03-22T00:40:17.99841Z","times_seen":4,"resource_available":true,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":864,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/AiPromotedGamesWidget-Byj5O19S.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/AiPromotedGamesWidget-Byj5O19S.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-784\"\r\nage: 2656\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=0haKtO8OPQZRxFP715tHtuWAjdkYYJ0Amfp5R9mjiV0-1774113940.4433644-1.0.1.1-2dEOZ9N4Nhb3pVprAZRFxlgYznmgKeWdFqaJxO9iMQExPWCipQ9RmA08v7qa7qu4nqqUh35scQr.3hDD661n_HpdJOSGQUHFEayot.kXdqLd2Ykp3RTLxThM_fjychge; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzwCoKwSRcMR%2B49XyPq4rK1bj7JbHAXCyTeZo8PcDv1iDQMaKkfU62GHGGi3jcystpOGOdC2fCEZ5cEnKLEa2qGj%2Bb%2B98ziDJ2iTM5vhqA0IW8Q%3D\"}]}\r\ncf-ray: 9dfea83e9bb69cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1924,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1923)","md5":"84edef470c315c31d3de5ed0b5105d95","sha1":"635ea115da194dc2ab021eefd7e1bbfefc98e181","sha256":"1843bbc55023e4f235458fcdaa749beb69d2142f16b74f6e32a856dfab2b77be","sha512":"696adaf49f0aedb5ef049390a5c7df027af83e4c4454986f813d7604bfbe26337ce2e3a64be60378c83f166536ac28161aa909a88837dff435e4d6719699beb6","ssdeep":"","tlshash":"8741642bb019ca7cf22c06a05294f745a42177bdd769a0ecbaef1900731409d337df85","first_seen":"2026-03-21T17:26:39.577171Z","last_seen":"2026-03-22T00:40:18.077623Z","times_seen":4,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /loader/fasttrack-crm.js HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 13:55:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: X9ovE_PVlm7QTMnZs7pgGdxk3XrTsm57\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lSw63XdDFEY4%2BG1mQxPP4mj1x96PkYHZ%2BH%2BUsvi%2FJZeMhoCv9bmX%2FoK%2FK8WpjgmzdXOkHk9KnpkAsw%2FgA0f%2ByPwqW2Sp9YZRmRnOaD88Yjt7qPW1oYPG3O3wGABn%2BQ%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 08dc547306e2c7102196b53ce0859e80.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA60-P11\r\nx-amz-cf-id: PCb-9sRNJT74zT35kcMuKkglZxwv8SnnaMgOpIrfLpaxlO-FT6gqdA==\r\nage: 3542\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"0e62b669f80928b5dac9ece193256095\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea841de1f9cae-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6791,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":26,"dns":22,"connect":8,"send":0,"wait":21,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galebet1065.com/core.js","fqdn":"dataspot-int-bucket.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /core.js HTTP/1.1\r\nHost: dataspot-int-bucket.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 09 Mar 2026 13:21:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:25:41 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\netag: W/\"69aec960-3da0f\"\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=xTvTLtAYocIlDgMCP5PsnsHF.urYa8LyF6rG5RboCWM-1774113941.2637658-1.0.1.1-M4AycSv9n5dXoKXg9HVMJCm5ZyQdQtxWgV3wcqyGaVZkXTcKUdbue_XSOolx4UOaINtf37p2bgZ0lqmz_dUhtlgaooYeQhJTL0Wj_H1rTRipzdWBUZTDQ48n17tlFb3y; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wc4hFFn9im3r23vbyYecEgGECNPCZPtkLGrZsB4CGY6RId7L0y77gvZcLbe6ruMr2snCUzjznIioZn1mvdA%2FPlbGd43EbIVte1V05OA%2B6ZMq52g%2BHeLcm6ajce7iA%2BGeXfnQ\"}]}\r\ncf-ray: 9dfea8438cd99cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":252431,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a1a23321d0a7b81fc124eb474f519164","sha1":"7302a4790a11a55a39af27b5c5d95391f36c7449","sha256":"ce157be72b0feb99d83e0ecb45dee49f9e8f69330da84cf33d65c8a80c297a63","sha512":"d6277696b3f9808906a75fa273e27c5777028965b625be99a466119e25cba96e635598bfa686bcfc065bb901db6dbeb2262b56012d65014d784bebc2382b5815","ssdeep":"6144:D1Osubz6j/kbklCp/5Kbb09tg8KSFO6JxC:BkbklCpxKbbCtg8KSFq","tlshash":"8e34944567f11c2752f6b0f94b0bc1d6722ac003251a9c8878ad73b85fcea7896f5bb4","first_seen":"2026-03-09T20:13:42.687398Z","last_seen":"2026-04-21T21:26:35.809035Z","times_seen":50,"resource_available":true,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-int-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galebet1065.com/core.js","fqdn":"dataspot-bucket.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /core.js HTTP/1.1\r\nHost: dataspot-bucket.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 21 Mar 2026 14:13:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:25:41 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\netag: W/\"69bea7a4-185ce\"\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=Cz2CsaQQl7rb2ysyaxFDWBYtfkfVY36co5ECcuweeAU-1774113941.6419528-1.0.1.1-E9W8ox9PHLPuPJ_Bdihhr1UK4.smN_jm1eRiuozMQ22Ul6krvgNQbbOFLiDf5WaKMhM46cF6Sa2qugiXBb_7Bo5ZoOqSHgVrHU2HLBCbGbqHPwMbdBdLpnYvBZ628ikC; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vo5Cs%2B6tUifS6JCF3LctcHQv%2FX2SeOE7f1QFXkYzPcv4y7nH1%2B%2BySLrQrE9D62mdjNH50tGyLBeec6cwwKtbzWXW9CUOIhmKNDZsZm04HJJ8i6J4Yuhe2sSeKKyPY60%3D\"}]}\r\ncf-ray: 9dfea8458d6c9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":99790,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"055db89d9f6b86d5497ec019668827cc","sha1":"a86074a3089454d5f51c83593a5b0e983610cf7a","sha256":"dae03523f64a6f242f1c2cfb89b2d39434c259c1e29e2c732d36969cd439e606","sha512":"2d5eba0dbecd7a61b9975b36bb17946ecdc4e5e67311f516f5b29b196c2dec7f367afb7be8ae64c71062627d009bda8eb21a58161a663d2b4d954ad988034133","ssdeep":"1536:xpKZqZWm6P+GgMwnm0ub2xiD/hIbq/Z3qDPAcnh:KqZYSmX2e/hIY33ch","tlshash":"fea35dc5b1a164f083939bd1d4750253e32c6865390280dcf7bcdeda6f299cab166fb4","first_seen":"2026-03-21T17:26:39.611092Z","last_seen":"2026-03-22T00:40:18.191048Z","times_seen":4,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":585,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"dataspot-bucket.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-bucket.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/Promotions3.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/Promotions3.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=SEOmuzLKOlrRmDO9PegxXDG3egCR7EY2CcAUvqbiQCY-1774113940.1497593-1.0.1.1-YrptjfEhM3zEKIMC.4FdPrRwQq.zbKTKYSTTV5d.8OEgAWrIsKRdwZsRvQPNFiHHK8A9r_ms65hXj65rwQRplkW1wy980bziDD_R5Q8.PXzUl8DRWVb.EZvYeP5FLsl_; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pfh34poX5ZavwIwYhBKvPefYNE4wS7Bkq8TYPzZ3rDH5h0DMoMDbttFSZQREKI10Msp4HUonCcWVG1aTreiwy30lwXNalWK%2F3AdmNtVSo%2FSsh10TFg%3D%3D\"}]}\r\netag: W/\"68627085-710\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea83b7dd911c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60e5a10a5bbcc415db7edd6ea60aec4f","sha1":"65af716c48e21ed7c837e77c4b7c3e2f33205dd3","sha256":"a8c1d1768e9efff44b10ffebd02cb4959af6be79610cdc02e44e840f0ec39a28","sha512":"418d3b818cc59a64f5261e2cc27fa2234ef1bf94a886866217d032d211c2ee47b758410154acbb7721314b855778c3e6bbd73fd57fdb092c5703c9270796ed22","ssdeep":"","tlshash":"ee312cd8ee305570eec443ffab118988795614bb69328edcf22c83886b8390800288d9","first_seen":"2025-07-08T10:50:27.664088Z","last_seen":"2026-04-21T21:26:35.53135Z","times_seen":523,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FavoriteGamesContent-c3zcF83Q.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-c3zcF83Q.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:26 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-ae1\"\r\nage: 2654\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=5WmEjPA1oEdTrstGSQT4kMOrBq0KedMiv4huVYZpJlI-1774113940.9160676-1.0.1.1-oRQsXclBLRRZld6bGfh.h2ymy6Sxlm38THzt6lRn56ZLj37XAUnff5bOwpGLZ0XIcp0O_cp1rrW1KChALwHSa4D0yQf7JEz_qxca.tQAx0qGGK4_i0SazDnDzOx.sIPj; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RyxZhO6U35%2B%2BmCxykPphNPGe8l2s3h5OlfnisWMqxMv20GY88%2BypNC25STzPD2VBPk0z2u4UUOq2F9PmhAJ22URJeJRaO2rDJWBltVnnji3HZsU%3D\"}]}\r\ncf-ray: 9dfea840bc129cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2785,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1707)","md5":"e29f6fd42cc0e7d08454249b8d89109e","sha1":"89670d6405e765f3e4c1cd7c85802207a0cdf2c5","sha256":"c7f4ea3c2548373b3ba229583feff8cb4210b7a73bca5591238e0326ecb6a6da","sha512":"c89f9878f8930ee2233e1a29e1fc7e09d538d9d9fdefb58d62c1774716de04c01ba6226c2b9f0ad60d0ca89839b107131872c8bb6a0fc6e2caa8442ce9b6ecdb","ssdeep":"","tlshash":"0051840050415ff9bf8e9eea6f2bd1941979034c6686c17da8784f3d2429a41713bff9","first_seen":"2026-03-21T17:26:39.612494Z","last_seen":"2026-03-22T00:40:17.793637Z","times_seen":4,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/113/226749.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.497Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/e/s/113/226749.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/388.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/388.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1167\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Apr 2018 10:41:05 GMT\r\netag: \"37e12c11d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 09:03:28 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 202933\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=jTeWXHZQKZiX9oCNJZgZ7tO4MHvACh8JicWLicyrIfM-1774113941.6092305-1.0.1.1-Y1G4JKYyYj4QrQtzE21tJUQXTpo_8yNShO.A0NkX4kEZWXC8khi7i_Yi7cy0gIgkr_oZ6Qy2jls31Q7SYBVs2avYhyE2NUKu3XT0SDQFqs7hR7EAFMSKU_zQvX8gtfde; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lbJU%2Fi%2B0zfECMq7%2FHJikBdqAexfeeDl5jaIr9pc8XBYP8qYP9BIEZn1VPp7k0w%2BCH6J2kxIL%2BgDyLtrduYYKPFaxHxX6AMpcAJGki%2FdCY%2BfFHvADI9voV%2BtQmqU%3D\"}]}\r\ncf-ray: 9dfea847085e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1167,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"4dede86bd6f200b8dd86a70867ea889e","sha1":"06874c698e44e9c4daed9592ff11dc32b2828d51","sha256":"9a06c39bafe9ae19741d470f8008a0572bc72983272fa2bd9cba7fd7a3d2cffa","sha512":"39f1f0aead5c929af1c580e156cd44b92ed409e0e6960d976a2d27797f7d512828b6e269c5e5200cfbe7cfe4da492f9e3e00eb4eaa1f5971b662a826e9868bc4","ssdeep":"","tlshash":"bc2196abb50e9a2ada37451cb47730a4a563338e641ce3c4bf7a512021acd0b8563731","first_seen":"2023-05-28T18:20:13Z","last_seen":"2026-04-19T13:12:16.929142Z","times_seen":291,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/logo.png?v=1773142319","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /logo.png?v=1773142319 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/X50Wheel.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/X50Wheel.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=uGF6_lSaCrDe1Ohl_3ri.O_d5Zc9myajuEU_MHnrLWg-1774113939.657445-1.0.1.1-hDKnVDxhV.dblkQ83EKiZ2D.bANUBMN.Tv7Hmk.gs9bu41dMpa54DmVPhLWaBTTdF_3axbP3t4Lum3q0C2n_8rYvtEWfvkeCnQ38stRWZPfbWpPUbvcE35Aw5dQ7UGtT; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXsyR9hOS1CVf7Y5wp2euCsuylU9nkKYS7XnTrMUvFJd8WVR4dSdy%2BFbxDERhev1Ig7SYAFbPdLleymD8zZ0f%2Bvj2%2FTAwbKNFSYCqZngPpq%2BFak2BQ%3D%3D\"}]}\r\netag: W/\"686270a1-65a\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838c87011c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1626,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6a4e68d64ae400253c8553f277334db0","sha1":"9f4421a8ee6dbd94b15c62098a2808e7a9df443a","sha256":"c7d0844a8e2c9ee547a4b9c4927823c95fca71407aab9cfa85bc1175c01fc1e8","sha512":"3472f7072defa5f4f70e595969443c4310d2f86be210449dbebb88defac139a9bd68503f7cefce592b93b10f0910846e815b72ea960c2809326f390e1c0566cc","ssdeep":"","tlshash":"ba3122f5fff1ceb64c9413bf3a148ea82595c02d8e618b58c83a4d98215383c9f502aa","first_seen":"2025-07-09T12:38:57.780257Z","last_seen":"2026-04-21T21:26:35.72226Z","times_seen":140,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/WagmiConf-B0zYIpvp.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/WagmiConf-B0zYIpvp.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-18a72\"\r\nage: 179\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=LLdAgZLKac4IVrm1EyQqNB3maocN1GozGsXbmcdcJxU-1774113936.754936-1.0.1.1-tVR6QwwCjMtrRZQa7NaePIkbdQEBRDdcCzswXXh8XylYdvnsbc5kxPRiju3yDUDFYXBw8WI3T8bT6JBvVGjJ6jOltzLObIesPaQB2VjkfsMuxhrE3nqvgHXU04GJ.J4R; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2X%2BQ%2BQdFduRNp1Kr8kG5SmyC%2BJjRX%2F8QRXOBmvGvgYWGfmLYiH1CV05FhCILKHGif7OBhbU94sll0WG6ZsdUCT%2BlaSNuayTtVGD0oP1IdLzME34%3D\"}]}\r\ncf-ray: 9dfea826ef459cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":100978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48214)","md5":"9ffc7f8013321c1fcfc6d9055babc05f","sha1":"f2b3ff148c33a75074e577fe689c3a7e07791157","sha256":"233f2d1fe68f5aef052bc5e2ef81a7663782ade365249e40d628f8f1c6e82879","sha512":"1ac7b4df1da940a29ab80541089861f322f6edeb46925d8c5075b01c66e5dd4dcb39349ba4814f5262b6934b7afe14b68d172595066334dd94364782af886a51","ssdeep":"1536:892Caz/SCdwD7ZajZlO7jMMDWOx6uxG7k8UhVxSuS7XUF3waGBfGYBgEytq2bPYE:hCaSlx5xG7NU+WEy1bPjv1K/XGd","tlshash":"67a34ad07196b46103a74ae008bf440bf139ac34200e565cf269ecde79b96ea9277f7d","first_seen":"2026-03-21T17:26:39.449607Z","last_seen":"2026-03-22T00:40:18.116093Z","times_seen":4,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/___vite-browser-external_commonjs-proxy-BvjNEVMe.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:37.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-BvjNEVMe.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/WagmiConf-B0zYIpvp.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-b2\"\r\nage: 180\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=qoXqUe5tmH0KhU.EUQOuPhqRwjcHFQOBPS61yQrM.h4-1774113938.0561862-1.0.1.1-w5K2H0prbbzL7qPHL0yX0xuEHxeOCSNePDw4dfgEVlXBoDlnFoHEZCmtfenlsMDjL7wtnImXKjlQOrgoz_H0gPLFl1U2xiAxjhlp5GMCkQ0E2wFN3LrOxnfbvNM5qsrr; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dHpa8ctQrGJEAylsiPLR3%2F9dUL1uKxbgFEpT6B%2FsQi93%2BH967KbJV%2B6V34SiY1KFkRmL%2Fqg2vVE7p8CiT0B8LGafqXJadSk5lrSoFH1flmyCx0%3D\"}]}\r\ncf-ray: 9dfea82f98b69cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":178,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"0453c525f1f5a151cf277c20b691a2fa","sha1":"a708a4aacf7fd35cb4a8e0123fb8f1a61c37e8d2","sha256":"c59d3f5325da91eea5c987c2e77a946acf12669640c1d2de58a18d9704fb914f","sha512":"fbbe4db43256f047f5b6ee830b42799cad28672ed2b6966ae31f586386e67e4e13ff6c003dc1778ab408edd0f562e5dd3670a5a296cd7136061447180425afb6","ssdeep":"","tlshash":"dfc080491694dcb0525b1d828615d402d55c4d6e73f8f5d0bb088d51020158b62b8f9f","first_seen":"2026-03-21T17:26:39.615425Z","last_seen":"2026-03-22T00:40:18.04969Z","times_seen":4,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/fonts/default/RobotoBold.woff2?v=159","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=159 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-f250\"\r\nexpires: Sat, 21 Mar 2026 17:41:04 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 2675\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=UW403EwLei6JnRu3ZenIL3CUSy_qEGDxLPjJoBVmW.k-1774113940.2903974-1.0.1.1-JsXsGFmbjxV0cNS_MDPeTTkvQjkmhL55YnmrkY2h9nVu4FfzDbzA0a15UFktDCPTM46bcvfk09BYkvbZ0_.jCCuQdDi90ml6x4GC3oBr.3tftwDcSemm2F7qds7l7A7H; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OkiN1KDS0Si31UxQVFXB6BzoRHnwWSNpahCln9q3ROfz2PbTPLWo13aQzflkGJqzIDth0X2tp%2FzdGCH9xJdKbrAfZOCJZl%2FNG1zCKxZ11lKDqAI%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83cdb539cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-04-19T13:12:16.87074Z","times_seen":2567,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":510,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/GameSuggestedEventsWidget-DZ6HUrEn.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget-DZ6HUrEn.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/DataspotTracking-iQyfe7l_.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:11 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-e8e\"\r\nage: 2668\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=X40Pb8oUbsJOqntQfHjqoFpy6HKxqGDTw7qFZsYOdxU-1774113940.3870342-1.0.1.1-hcfil1E.4.IuvjmSw43I8RMGcjFKauNqUS.mZdR4DJQoW.ybsCHFitGkqS6Xx65WeO.HyFsFLZxVCCo4_s_CiAy9Inlp8Voay2atTSbEV8QNhxJitYd0NQZgRWlWAt2U; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T003rcNLvaHSU8214u%2BnCPjmPzpMHgH2PXTzCuHfQXya2dpKX0ZtRLD9IaOoKypjq7UjINaE4t4PacitoEWdQf00HrtT27Vw%2FBEB8%2FKjjpN3%2FF8%3D\"}]}\r\ncf-ray: 9dfea83e2ba79cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3726,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3725)","md5":"ca5db02ec6d235cd64de2a6a474f33f6","sha1":"25b848c932d6face1ad43177f53b1d3032b0fcfa","sha256":"adcca01c8b00bd4e28badc2e707aaba8b035f40cc8d4ff239e7ae508dfb79349","sha512":"76bfdfcefe35441f326e410aaa2d4a801c423edab5c999cce894894adf9aad5eb6ac478426ab9ae2efcbfbc3e97a4f75744956a2b800c1072d9671e4b16c19e7","ssdeep":"","tlshash":"6c71d75ae010aa39a13745d82bef3119143632b8b94353c1b73fca7123e11916b5bbdf","first_seen":"2026-03-21T17:26:39.604297Z","last_seen":"2026-03-22T00:40:18.192831Z","times_seen":4,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FavoriteGamesContent-c3zcF83Q.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-c3zcF83Q.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:26 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-ae1\"\r\nage: 2654\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=dYBawh0ro1Sqe0p7SI9Pa3Bo0.IvRnkAtgw4WwYW1r4-1774113941.2729084-1.0.1.1-LluboR9Tz3zwRN6vbXMRkD9lox107GZ94umV2CsmdqVYzFuuxrduE6Qr9_NHyJgq_Mj1ookJo8IeECshvfTJ1IvYIv6IZ48O.Cjq3_fi_3Irj3TTGsWyA9CnEyf9lDQb; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4q%2FUrklxD%2FMsgph%2B9GnLIGa6vNVaWalDTJR%2BKnKpArBqbo%2FrmqqO0G9iyJQSt8pDg0Lb7cAZvo5k%2FhXyjg6jDz1TEtofhVPy9eFH5xd0rYw2AyY%3D\"}]}\r\ncf-ray: 9dfea840bc159cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2785,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1707)","md5":"e29f6fd42cc0e7d08454249b8d89109e","sha1":"89670d6405e765f3e4c1cd7c85802207a0cdf2c5","sha256":"c7f4ea3c2548373b3ba229583feff8cb4210b7a73bca5591238e0326ecb6a6da","sha512":"c89f9878f8930ee2233e1a29e1fc7e09d538d9d9fdefb58d62c1774716de04c01ba6226c2b9f0ad60d0ca89839b107131872c8bb6a0fc6e2caa8442ce9b6ecdb","ssdeep":"","tlshash":"0051840050415ff9bf8e9eea6f2bd1941979034c6686c17da8784f3d2429a41713bff9","first_seen":"2026-03-21T17:26:39.612494Z","last_seen":"2026-03-22T00:40:17.793637Z","times_seen":4,"resource_available":true,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_255218c8ce749fe8c9dfbc0b8e8ed1ce.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_255218c8ce749fe8c9dfbc0b8e8ed1ce.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18246\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 01 Oct 2024 12:46:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66fbef08-4746\"\r\nexpires: Sat, 28 Mar 2026 14:35:58 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 10183\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=w7VPS9l88JKJ5tJLDGKmToLYjoBa0_TD0FgzI_rppik-1774113941.621266-1.0.1.1-ZA4Wufsoj9l6nQbjOy9VNR4BYVxH.Zi3jN3MNNYdMAN855Te34uYe4ex9IcTzDbUXOpnStu1lZ3QxS1bvVzSsJcQ.ZAk66xPfd37xdSkqackHHdVojk6DSC3cwsOn.gq; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hV60qVxAgLLEOMoR14kD%2FbcDo4nuZmAyomwmZ2DBQtI3TnUdMADQOTYXtefxI4UpohoLoBTlFaJC9leCHDT0F0oQDHZERRdRQ5DFcFLEBPuqscFtbQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8451d4b9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64a87f03ae635843aa9ddf8b795ef059","sha1":"820acaed7c185030663567efd9b9b0d820c10b2e","sha256":"eb987fab4dbb8a68ec1dac3374ab8d34c1d24e192526bfa17f415a67957094e3","sha512":"881a3d458f5189ed68310367aa0b7c4e4e51df4bb58d942b9f7c3e06a66010f735b9b0161f80028adb1c92cfc2e3df3b4760e69b0df6d84850877c60c7307373","ssdeep":"384:MTMTJfN/dyUK351WMwsPAv4eN/lz2T6zfdhXeVZA4BWDYWTsVfAEsTTQ:9Tj/NTFAeN/RG6zlIVZAkWDYWwVzgU","tlshash":"c682d037039a424351b7142fccaa7d52a4d0097b8a2be67a0d5903a54a3f7398bdf67c","first_seen":"2025-12-24T22:39:16.361229Z","last_seen":"2026-04-21T21:26:35.709049Z","times_seen":34,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.21btcoservice.com/?type=json","fqdn":"geoapi.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:35.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J2fBjU5XyWDs01K6AQRQo0%2BEgh5PcEKa9WXk%2F8%2BO2M5uqNK%2BtKlgPavpTPueC6NXR8VYXoFN0xLRSD%2FSJxj70KJ7hMhgedDXu3GONKT0BupQAfzSzPEjtQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=pIx7QIU5vYmJ8sZJ4ULzl9_QtsR4BSIgK0RWyfTIi1c-1774113935.7685995-1.0.1.1-ljDScQ4XtAaUX74x8whoG8H.xlccDOuJaxzX5mRpfSekLh8C0SaWRkbT.2cy4qri3nsUO.Kp_.fvIU8BhGo7e5JhV0vHVb6CPwNDdmyClJ7qWnJvFUEdYlZUZY5cqPyM; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:35 GMT\r\ncontent-encoding: br\r\ncf-ray: 9dfea8228a485a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-04-21T21:26:35.620659Z","times_seen":130,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FacebookTracking-CT90FiR5.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/FacebookTracking-CT90FiR5.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:14 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-2a8\"\r\nage: 2665\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=XP2M5l1eU4FGx6iBukjQtlia6ZMy_Jd4bJYnAw4agbs-1774113939.6307664-1.0.1.1-RcZ16UKKljA6QPyhZoLHf5597OzNJX4nfTHIlaz.0Kplbw5w6BOLa_bxOvBwL1aJvGSbnMYWb9cOfi4HlSHxp_IFzGXJwCzNL_xr.tGyt9JfUgo4y_H_KgXha6KjUTVg; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eflpdlswr%2FjgXKHUA3KplVi83ijCeQS00RdzwRe4hc9irBNOPpxx3uDI9XLqxJhkpGSC9JYBNCAlqO4UZQXNDLl2%2F8TrS2ySB2bmfFAUJdBcLZs%3D\"}]}\r\ncf-ray: 9dfea838da469cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (679)","md5":"b0d0301b2eca6fd01c8c09252d6d09e6","sha1":"ef908a1000f37352b6d4953e7c167a79b92bf5ab","sha256":"6481d9f40bfbfe3c886be16fa7c69fa8857ddd75866b867992f82ad05ea17071","sha512":"e76daf2ef88da9da386b72ea073a4c5b5d62606628fc178d1b5237675b33cab92443f01354e8ad9fb130f419fbec9a44119c02e3105d229e1c18cd644e4e2681","ssdeep":"","tlshash":"ab01fe0f2c45b479167c18b8d3bbd81425ba590a358f84a5c6c3cda5262458640cdbcd","first_seen":"2026-03-21T17:26:39.417431Z","last_seen":"2026-03-22T00:40:17.952753Z","times_seen":4,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/check-auth","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet.winwingames.io/","date":"2026-03-21T17:25:39.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /check-auth HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet.winwingames.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZTxfajv8Qw%2B%2BgFWCPoiqJrAMStNKODkMAJ0klbCpCmRoTYHfq%2BF13%2F3WHDK2%2F4pBuE7QeH4CpEnD9tvYuLmSUBteP5DGsKhbq9C6eYNATsLW5Fv%2B2I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dfea83ab95176a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d0ef894fa1c5fc383cce96e2d857de6","sha1":"fe19a48e71f224e79f27804ed7d5632c065e5de3","sha256":"0b3443a9377c829f10dc4dbc281475c7bf89f141d56af637ad5c59b74d00b2ca","sha512":"988a2be034f9f80c25a7cdcbd2659e4310baea3e590b0f9fe75ac9d0d7b1d90a8e8b07f33fde07627f3f61eae405d36f9afd6cbd20061b3088ab844a0821abf7","ssdeep":"","tlshash":"4c70000202000222ea80000803002a3388008838832020200008a02000230880002802","first_seen":"2025-09-21T05:18:37.922942Z","last_seen":"2026-04-21T21:26:35.723Z","times_seen":61,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-5iQrWYQ_.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index-5iQrWYQ_.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:26 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-b6b\"\r\nage: 2654\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=GVx5CTSwanHzsB0bmsvVgMgSCPiOJkuBiKOUo9q7YVk-1774113940.8933842-1.0.1.1-C4Qw6Ejld4ZFzYXBMWCkzNFVNNJ1yTbkDtWu22Ra3myRfDlz.AAObVjROx4XdovI6_Dk_phAbLWNFNnUcf2hXC3VH0dePE8QJ2SX_0BZCOiac9Jbysr5tvIcQuiITw4v; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3bgOl3mdJXXznU%2BcNtyKV2X1lk6aWp8GQ9b9szJtWm1QwvsI%2BNjKa%2F1ylvyRlX2nMEw1o5wsCVZXBYYxhqGz%2FIap7J8T9VN%2BU6ZjQbT9UVeNQSw%3D\"}]}\r\ncf-ray: 9dfea840bc119cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2923,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (2922)","md5":"31e010232dd36469670cc2df8c881344","sha1":"029d5bedaa5607a234dfaeca2c6714d403d0f283","sha256":"d880db5966832fe6c39364ab8dfefe271f514cf8e5bf8aa1b86d5875c2c591b8","sha512":"6ce98fd2a8be27394661bea778cf317e1d971c3394c71ee899cb6fe0cfc4e85cce60a1cb676d3b7ae3161e368437ba252c603b73dfa3ec77e31a9cfa7dc1c3a0","ssdeep":"","tlshash":"3c5121c76042e7f4afe748a6429b10b074374d5cbe1f84a082be58964998792e35bf8d","first_seen":"2026-03-21T17:26:39.375997Z","last_seen":"2026-03-22T00:40:17.988097Z","times_seen":4,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/460.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.455Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/e/s/0/460.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:42.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/immortal-db@1.1.0/dist/immortal-db.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.1.0\r\nx-jsd-version-type: version\r\netag: W/\"ee25-pMHxoJFNs7/Bok84dZEhK2Ol9UM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 21 Mar 2026 17:25:42 GMT\r\nage: 988152\r\nx-served-by: cache-fra-etou8220189-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 19803\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43474)","md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-04-21T21:26:35.769117Z","times_seen":323,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":33,"dns":0,"connect":13,"send":0,"wait":14,"receive":3,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_88084e2fcc8220fa5276981c697593a7.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:47.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_88084e2fcc8220fa5276981c697593a7.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D; _ga_MCEY36CK22=GS2.1.s1774113941$o1$g0$t1774113941$j60$l0$h0; _ga=GA1.1.1652025929.1774113942; _ga_2CT6DSEQTF=GS2.1.s1774113943$o1$g1$t1774113943$j60$l0$h0; ajs_anonymous_id=70f5bf9d-8e3b-4eb9-ab64-c8f626701651\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 270436\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 11:14:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69bbda89-42064\"\r\nexpires: Sat, 28 Mar 2026 14:33:10 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 10356\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=b.0iDZR3fifPs86WlBT2dE_59kTQG630q2jrD4AdAPk-1774113947.3910813-1.0.1.1-bZI8f1m8.TYihNIKrKAw9U24GP9tXbmZFJAqJgqHnYsapp.agEL6uLi.KE3bySXJejaoR1hU5sfw7nHtY8rURbjqNPmnqps.64Gsv7bIGz.3ncTrF2ZSzkgv2A_X.8kr; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AAZNNhJAUC4xgAzVfyRLea6amTIcdYWqqrE%2FJFPV2DnsO0bng8dJKt20%2FCN58XjJl%2BiWldNcg9IsD3g5KvY%2FDtUhEJ3CF79wszFD3SBXJk5mL57aqg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8694ee39cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":270436,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2600x662, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"65cb91eb062d3f8dca6bca6b1f601274","sha1":"c1b702346866331105a92a8ce17c9bdd24757493","sha256":"2646f8a949c3d3a2e2604c2a85a41e2b584defe0d0536c31d004dd8531d13c37","sha512":"afaf0768e8d07a89cb41f83a6f6c7ad557f2ce0c1c1166655471b59c80ad8fb26f3b89d7977b5af1a0a468ef6b01f31681426cccc1825820c120caffa39548d7","ssdeep":"6144:LciPlUW9tE7Laz9vMVzSaDdxiTQ/Uta+oZr9BgSezF2d0NZ:LdXeyZM86xatw+oHqT","tlshash":"de442325468fe3252472ceb3aface35ad691faf48bdf01215c0394a94c532dd1229bd7","first_seen":"2026-03-21T17:26:39.624238Z","last_seen":"2026-03-22T00:40:18.09711Z","times_seen":4,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":590,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets.json?v=1774113900000","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets.json?v=1774113900000 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:25:34 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-6c\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=IXoGOxqFsybQ_rKFH3ep5P2VAqEux5osFf_WjH89SOU-1774113934.3674757-1.0.1.1-P9s52g7EZyYbA6gGyut0qdHnKqX_kXDbbycfmqS95vH7yDsHuIvXQwxDqDDClcew0ckkLv_Pu1QkdTTY7v4QBh0nOwgHr7s1GXp8IHcV.xv4RxNOqdjRhCq37el.6y9n; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZWHcwMxdmy9InYdFG4ea4uW5NiORDgaO%2FMP2LsXepprBJvoYedSXCodUSV1N8Fjgn1F%2BlU1LS5NluA%2FnjLU%2FADvHaHGvQhzDSLHEhQtyszalhI%3D\"}]}\r\ncf-ray: 9dfea8185cdb9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4ee89984d6fb4aad941e7cf6cc639d8b","sha1":"acba0d60920c61a2499c425d0fa8d6fcd06b53e1","sha256":"adc12bf71cfc37b9889de5d878c36ef74224dd986fcbec05656adb2d12016e22","sha512":"998b96b1f3fd723a177521a6a54616931aa2e0fce8dc23940f0fa573b14a711d210dc1dccc67e69db74abd89413badacfb21edfc081f3fbcb642c1a20ca98b9e","ssdeep":"","tlshash":"95b092885a6dc80033c0e08822856b04f304f1ce8ea7025e201701a88af0b268ae080e","first_seen":"2026-03-21T17:26:39.627607Z","last_seen":"2026-04-21T21:26:35.704309Z","times_seen":23,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"0beffdc96a1a1b35b5ce2759d6d1d51a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea8189f450731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-04-15T01:21:42.763559Z","times_seen":11136,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/menus/footer_menu_751_tur.json","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:38.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /menus/footer_menu_751_tur.json HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:38 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:25:38 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-2170\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=lcO_HEITmmMlZI0y9dFAyiSqs6C.VE6KLC87V0GJBK4-1774113938.798428-1.0.1.1-tgwTttRo1OIRTUGXvErhC1GqkcPe34FjWQonvjsXuBXkZIFfVYMcQ1xVI31gk4VOB1M4.JPdVoh82EdUkN2q6_tWJaUJ7YYEnbVACJc5pkMgFRaV3DiIGyO6HoGYUK0I; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2FMrecVExyxel2nxAf5aOPOMoaFT4dI5EO7i4qjtrAjvKZ5gFjY8jJGDX8X4gZDD6zHjpuaMbUEHi02RGvtPUmeCFbq8JCCCYgLxK3y78P5FToU%3D\"}]}\r\ncf-ray: 9dfea83459a69cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":8560,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cb7c741a547fc4a891e36f03de2f52fb","sha1":"e589086845b554f59b1b11b2b498edd0f09d2c50","sha256":"e1f2743754b756e617ee3307f8ac72f50f94263f3009f9aa90aec03edac6be73","sha512":"2d3da210a4cece77d8c2c5a21e57119c60f5010e02e3e86a8e7d3b1df68174b55f59be99ed140bf5760974abf623b8eaa24d96f0808498dffaae7723bf944482","ssdeep":"192:XSk0zkRSkukOkWkEkRSk36kphkpGkTSkEAkMlkk73kKUkwHknu4kQSkvIkWbkCOY:XvTNrLz5Rvn8xTvewIYfQQvVdqO3y/XV","tlshash":"c7024612f00d5576e7087e00bcc7ad0b84ce609dac5d49519d4d8bcecbda5af8ac62eb","first_seen":"2025-12-24T22:39:16.150949Z","last_seen":"2026-04-21T21:26:35.694256Z","times_seen":35,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/TvGames2.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/TvGames2.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:31:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=hLENvZHUJOlq4sxdmpLdWRV6ny4i3d.vXTkHk9XlvZ4-1774113939.9749556-1.0.1.1-9KUTl.ze82_sOWcPsjxFbtD5xaLPh8MLhaeG0sAf3vFOlNgwRiQl8s1DiuyU8MvrTijfFAsb8KJJj833AqpWFypETBB1pKeJD_M_Ktf2s7Gj5dLp.4nogx7u0VIpWwlI; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48GUdTl9YDbuZHoZJy0yQHoZYWGsph4vzM2%2BqtHtQ7KDR9GTCW5WbnmoFJGEcPgWNy%2FSj%2Fv8EbgY9GRTiuBf0DX6cWm2vIB0GENQdfMxLxxRfXLDZQ%3D%3D\"}]}\r\netag: W/\"68665beb-8dc\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea83b7de011c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60d24e57914ca41e702277a9ce44e813","sha1":"bfb08c8dce26d91b1fdaa008ffdea07bc100e0c7","sha256":"144a8bd1616f38a95bc6e7f59283e462f358a2dcf79e10cd7bd256d49e6e4134","sha512":"43503c3df559cc8b5fab3dcd299f5dbfc8d5a6f9dbd458781c53a409d859ed730ffc24420d462b914b4ef96f1d63d9bb508ef733bad33edadc5a2d12b22e4eb5","ssdeep":"","tlshash":"7f4165f9efb091f46dd94fa9ef324cec750e68fd9f220a84812c861c66a3d94d644410","first_seen":"2025-10-09T13:22:28.980997Z","last_seen":"2026-04-21T21:26:35.76447Z","times_seen":49,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-MCEY36CK22 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\nexpires: Sat, 21 Mar 2026 17:25:40 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154400\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465790,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"c9b77d649190225b6cc73b0a168a1bab","sha1":"0dc6bfacefeb0c209b1eb709b01d4cb1cf60049d","sha256":"19ee39e052eef81c2d5c1d4333349d0938056b7e1c68633629e36be3ac0854bb","sha512":"e89c046cd072b763bb6edace006a3afb9bc99dffbbf9b94ef03ce5f07f04b7e9ff7044dcd1a24ca590de44cb8e25e413e9c43cfd34333fe39c7ce92e4640714a","ssdeep":"6144:v4iJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:vG4RfICAbHm8eeBUX","tlshash":"1ea4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","first_seen":"2026-03-21T17:26:39.63504Z","last_seen":"2026-03-22T00:40:17.979741Z","times_seen":3,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":72,"dns":1,"connect":7,"send":0,"wait":28,"receive":25,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/3/7445.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.496Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/e/s/3/7445.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/392.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/392.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1732\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Apr 2018 11:08:52 GMT\r\netag: \"25168aa25d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 11:27:43 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 194277\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=S3l6MUxeXNyj9F0pm_LK4gHtTAs6dwjRlLNfgl2j.SQ-1774113941.6033397-1.0.1.1-_YUovqN0CO.FrQOBPCHGtFif5VVeWgs86uPJKdoClo0AoKxyg4z0ze7wQY_uh2.Ngi2c4J1Jm25cHHCw0E0w59JFA_TPrwtp5UpX4HdWW9En55DVcOlYPxRgkBKAlSvp; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bwCzslmobIAcp7Qsa3ftYzEs9T0kOeaOrILTZ%2F9wQ9NwLHsQhkd5r%2F0Lo7IFhGARFatOq7nVAB1r71iUjqbwfRSuYuQP5m85GUm%2F4AsNbLoihtqiDzHkZqq6vtI%3D\"}]}\r\ncf-ray: 9dfea84708245a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1732,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8167aaffc690bf733d77fe67e7e82385","sha1":"69174f1a4a0e6df0dd5e024d47d19c9c0c3128f3","sha256":"09722c44419f5a5633a09de3481abce270e484af3130606ae5353a199d29687a","sha512":"0cf98012f1fa9d19e5b5c6144f249db4e516a9b7daef2a6932ce79926e5bdc0210df88d803ec16f4b260c1d99b842440465e15394c2236edb2cc3ceec13f2164","ssdeep":"","tlshash":"4e310b830d7c6c1d85ce387f75450c75e1143ca6d7006e767ac70aeda26d95932f9e10","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-04-19T13:12:16.916633Z","times_seen":242,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":64,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index.es-DXJtvHoT.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:38.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index.es-DXJtvHoT.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:01 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-48144\"\r\nage: 2677\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=t.OTHeSsqLXN3y_mnoEWMrdCLWM7n3akW8Cro6ZoZc8-1774113938.9101317-1.0.1.1-bufpEZKFVNl0brrVou_sSGlUAiRHag.vMPpa4Km7LEwoOMFjtqLZq9j04ad6lxGdlijLP402HK81TE10oM46A7.wEIFa.Oa8f4EV73Bo1U8JI5qTeDR0D.sZ1U7g.ZW4; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEK%2FdogbIgoDYRvryktCXRh9EYJitCnRBXdmMohNc6bKRjswz87tUp5X7ZiIBojIEYkv%2Bd0M%2BQLBDitTeOQkg0knk9LyRpvje%2FEIM306ueQUpog%3D\"}]}\r\ncf-ray: 9dfea834399d9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295236,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514)","md5":"7f5a29e9b140d89b45ef6c2dc1458af0","sha1":"d3d5fe3e4254d00e2b6c0321d24cade44f2359dc","sha256":"7bca838c2ed01b7b467f932df8f019f4ce70b01e018595eb6e01f08a1c826261","sha512":"74fd665894507bec47587bfc1fa7e1356b66e4b0efc0ee8bfeecb69331bde3cd559aa2583e98d0065525a79b28fea6568904e71d580aa5caed815377063d9703","ssdeep":"3072:AzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6Ubh:Az77jdU/7sJJMcvYisoljSFN1Nd6Ubh","tlshash":"c554fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","first_seen":"2026-03-21T17:26:39.597293Z","last_seen":"2026-03-22T00:40:18.118105Z","times_seen":4,"resource_available":true,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":322,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galebet1065.com/api/public/v1/tur/casino/partners/751/platforms/0/games?category=28\u0026limit=12","fqdn":"go-cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /api/public/v1/tur/casino/partners/751/platforms/0/games?category=28\u0026limit=12 HTTP/1.1\r\nHost: go-cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ofMudPXMjoo%2FfcA71p5bxuXe7c3GLjOu1Sq37jI6TTDmEP6%2B3gCR%2BE0keraTDZte50mGD0Fm0r3lwQw2Gv1du7Rsi946s060fuOLeW9Xe1xMtSEGUXY%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=OG4eNkD7Nu.fhCgrPO3NzIfJ6eErflLO..xdqN3yjGA-1774113940.057309-1.0.1.1-0RcXG2.kDy9LktwnePeDFP6LNdGgqYEmZAsuTQB2tSx.m.ZRl2MJU1zwlV3MNdpmN5IrP9R1nUUwiEcb.2wMr_4NftUBJY7MEa_oWUtElu50e_9JCeOqatZkuVEmACWU; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:42 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9dfea83b4da311c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6334,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"87d2046836e1e2803fa2d20a12fdec18","sha1":"7638b4c1d1ed1f575795f63bca828908abdf5bb0","sha256":"3487d3cbf36756df245659e4d8ce5ea8b8bbde6bdccb6c6886f8e828c4154251","sha512":"5ed29a4be38073aadc0247eeba61da5bd1c1fd7bf3f04a29df8f8c8de8fd2481321bddde5c2dc13a1b7e6f4e4be03f8f1056f24b7e1816917928852300299aac","ssdeep":"192:EpS4FvcY4FCOFFCp2X4FCMmMfbnWfORMX44FHFnbn+g1YOYTLFCsf4FCfl41X:U1ovloJ2UC5qogq","tlshash":"f2d1cf5a0924faebbf8a0d44b4463c4dd9be13c2778c7d50cd96994ea0da0e513326ef","first_seen":"2026-03-21T17:26:39.637935Z","last_seen":"2026-03-22T00:40:18.036206Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2775,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"go-cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/games.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/games.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=vzr7b9Uilzf1RH2LiNtj.rm1KXZM3jRjArmhaacdvOA-1774113940.1596835-1.0.1.1-btp5.jYz6SNxfG6G45o03do6bb3KTiwimkAr0etZQTzI9dpAYFI077H1..r_iuCUtBfV28TCWFQjANeYu6O0yUpSy4k3Dyg.PGI_PekU.XONBvGUKL5hQxPR2b8ZPwe1; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s5itwS8LmgVWB8t5ciW3odknuEnGbyDqQbMAQiY22%2Fbf86JctzBK3SV1O8QpmsQug34AS5P%2FV2kAj%2BfGkG3NBxGBNHprozwybjJgBj%2F%2F5xFNQz1lYg%3D%3D\"}]}\r\netag: W/\"6862707f-525\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea83b7de711c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1124c704ce353b78a51dd2190edbf761","sha1":"969751af8092f4dfa4450def11dc616eff99a8e4","sha256":"02b58d0aaacddd78f61fcc4a92e72d8526294443ec8e695fe41a763a24d873b7","sha512":"62371f1a27dc5a9f43dc9d738c81641e16ad577f02a50973cd1515f41053160ac5286128dc60ba13ce57271eb462d1f258f830125048ecaad0944f9f5153e39c","ssdeep":"","tlshash":"fe21e14c573150fcfd4fb3e9a32e6b787449f2156823c878c05e45cc268aa4b64dc861","first_seen":"2025-08-01T03:40:47.562391Z","last_seen":"2026-04-21T21:26:35.731212Z","times_seen":1018,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/v1/projects/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/settings","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:43.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /v1/projects/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/settings HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 740\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 11 Mar 2026 12:57:50 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: yfbKbHax_b7IMEA1WXjd47PBRdK3ZaCC\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 21 Mar 2026 17:24:25 GMT\r\ncache-control: public, max-age=120\r\netag: \"183e77df6417b705a7c0881bc6eed4ce\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0dab08166aa7b915b2e3314728d79750.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: G3gfL43i5cRKq4UvbZDOrEsx-IM5_OytcowaRrIJJJOIJEhTfzBYpQ==\r\nage: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"183e77df6417b705a7c0881bc6eed4ce","sha1":"d3ddf81f8b2d425f75fbb248ae561cd60032c28a","sha256":"caf3577f1a9c90c6793784c2e72dde2cac1cb1ae6e454cd01af808ae90b1bbbd","sha512":"b082c0c9f92685517414ab95bd281be3dfd20a6e2e2ddfb48950906dc417c08d2b3321cc5b1029f1973aff44e4bfb87686739ce16860a640f8e0a3dd104382d7","ssdeep":"","tlshash":"eb01c0cc3410b1b78d4ecb23c9193d037ef58879188a653454be5b4c00ba9ad039ada7","first_seen":"2026-03-21T17:26:39.639761Z","last_seen":"2026-04-11T18:43:32.371083Z","times_seen":21,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":13,"dns":0,"connect":1,"send":0,"wait":24,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:43.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Mar 2026 17:25:43 GMT\r\nexpires: Sat, 21 Mar 2026 17:25:43 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 21 Mar 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 129307\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399907,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32337)","md5":"795d84654feb099eed77d853a9826bac","sha1":"9d1bb066ae472d0b589ebd3c25d1cd2125d9173f","sha256":"ff8a7dfb26de0d9a412cd185e33fe73639c29abca50700e11c3ad7480de7c09a","sha512":"75a841715cc1b55c0c1b1508d8977d36d54e715de6da9d58ea5bafcd7919a297aaccc79fb458dffc436a063b646476d66fb78d0c570a9d94423d12f30ec85555","ssdeep":"6144:FrL5bRuPtxA5oJ8T4AfICc9JKwpm8SB2S5K2wzO3F1n3wRXG:FrL5bRuPtxAbTfICao8Md7","tlshash":"388419cdb7dab4664393a474903f018ba27a28e2b44cd894f086dcd43e706aa5177f7d","first_seen":"2026-03-21T17:26:39.641488Z","last_seen":"2026-03-22T00:40:17.783218Z","times_seen":4,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:43.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 21 Mar 2026 17:25:43 GMT\r\nexpires: Sat, 21 Mar 2026 17:25:43 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154182\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465712,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"7c95c276dd26ae680ceaf31d168d64f0","sha1":"0e7d39f3b467ed3ec8a74928027bb1c061fcb752","sha256":"ea34db2dd7928b065a6bfe5171d849504db51bf730a5d82c850d7d652752916f","sha512":"a9058cc64544efe7af26ba9e09bdb5c7d8bc7c77ba377e080f49e9237a7ea315588643c34bc92c76528b158850c2efe666665ca9ff1e4c3e4f619a9680e7ebc9","ssdeep":"6144:VoJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:l4RfICAbHm8eeBUX","tlshash":"2ea4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","first_seen":"2026-03-21T17:26:39.643432Z","last_seen":"2026-03-22T00:40:17.988837Z","times_seen":4,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/custom.css","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:32.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /custom.css HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:32 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=cJT.QPujPrlEElWdNG9DGcmLvReg8xcERlqB499ufBw-1774113932.3229752-1.0.1.1-mPsiEfSOP3DRaiS23f8O_QkCSOu1GGS38uvAQV3XH9YNuYWVsU9SPilgl1Ezhggscn9tZuPEdcWi6MsjdcgWhaknwcWCE8lGAK3CPf.W39Esyy7ldYYsNoamYcidtvxd; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:32 GMT\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NkO7Hi85JuBrZxPk8hDaWZfO7GS9N%2Ft05gb0b4pdIGAsl0%2F0krgy68%2Fx6eyEEGNeGa%2BOhigee%2BQ2atXJtsHyFiSEaGqx%2FZONlSqn9CQbAgQBVGQ%3D\"}]}\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7a7-4468\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea80afa4c9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17512,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"bbb7c1c4cfcf2c2a2cab25bc642c83af","sha1":"aa928e189ed6a386d5cedccc39ed8de6ad12bc76","sha256":"c68ea7a8b04d3aa7e8bff61b89fb09a57973c61196e082239b21042be7fc29fc","sha512":"ffdb2d14779a2b1a85d3eb67609a2684e7edae137be64af90be2a1af6a9d88471e817e16e1d7c0da57bec5f8f5bc4e60b8aee8a4fc87a4ad0a5b8953a84d649d","ssdeep":"192:52SyYVVLN2Ns2hamJqKbEiExkouE20e62UYx6lY9qywNqVh4P02pHnNPXwVUICdP:wYUrhaJlW6bLpHz5p","tlshash":"ed72a453fee31989716a8198566bb3fc7e7d404397098d787ba4b3748f837e28431a48","first_seen":"2026-03-21T17:26:39.644826Z","last_seen":"2026-03-22T00:40:18.128539Z","times_seen":4,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/live.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/live.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:11:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=SCQRk.FU2FJvREqA2zo4Cnlfm7L8KUBFH5VX4saeYGA-1774113939.7166886-1.0.1.1-F4hOsIBPAtPy21hQqEPkab_tUzK2N6fcvfpeKE6yzXHJbQOP_FNwvRD8mpyzKRLmkDXw1A.CJAOeimptmHxKMHZnIsYrgqCo9Rh_dhKd43q13pCwZNjj_LGNMBbKOynF; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPrsrYPXKLYaTK934h%2FKXJDPd4hSPTT2cIwEzpVT0hd4zHoy4MaK%2Fo4gwbNM6mZ%2FdIsUe9UiRolzrAK2jNbUgpPFeLe5QWxEwUEtqMd9ULiKlc5Myw%3D%3D\"}]}\r\netag: W/\"686270d7-223\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838f8e611c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":547,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"177a1ecefa857471d64fb388cf5125d1","sha1":"726ab602ef7c82c9db251ac2a8dbdd142a28cedd","sha256":"e9bbd35f8b3d2bd962d3811c39e4cf82d2448f40576bf0e2fc495f5231b2cd1b","sha512":"b17c2fbeb47ae4e82b2e4b65e0874d54bfe07636406d4d56c25df1af1ee331f298538b63766cb21fa96cad217f86c61c2a1a3baee117ceb992c194d80ee87513","ssdeep":"","tlshash":"10f0e9e8e0b48a583948712c1b1c28952e3b32330dd18a39306be32e1f1254673cb659","first_seen":"2025-07-08T10:50:27.692829Z","last_seen":"2026-04-21T21:26:35.623947Z","times_seen":1589,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":112,"dns":36,"connect":12,"send":0,"wait":544,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/flags.png","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/flags.png HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 94974\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\netag: \"69bbf7aa-172fe\"\r\nexpires: Sat, 21 Mar 2026 17:41:07 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 2671\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=2tP2_iQCU215XTr.Lr3a4QvAUMI7bxA_njN79eyoU8k-1774113939.529356-1.0.1.1-djHZP9.z3DF.Ink4h0yJO6qgyRra6L1me8DktyRE1waIMBru6YMKyA33mSSWAo85bPEfrzvpsSdgzySM.zVfNkXxXpljRMcIpC4jnf.e3IA5X1cjLxhp4uiXtzpXKFie; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjOD6NVQT18P%2FuO1x4Far1CuW4l42iRsUCNiwaWacbY3dPMLIul%2Fqu8opKnQOvsWDO%2Fs6c8jvHFp5zlZITyqLlcfHqKXEdJ7HqwNFzJgsFhwlvo%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8386a239cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":94974,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 17960, 8-bit colormap, non-interlaced","md5":"02c3b5af3d0ec1f21c51bf21a22241e9","sha1":"c39c097d704c754294e3fbed23b80e502054396e","sha256":"1c0578c469db9a3da5c0b6fa0258f99b2a2ac602d0027ab6fcb7b218c3acbb75","sha512":"bb097e3532e83aa4db8e8dd7cd16d95d83ae77f4cc19207f04f3b929ca695ebcd7f5730e9ea888763108c95028f40f81490a03093ef8d57665c6f4393091dc63","ssdeep":"1536:wxq8h3gUrI89XxfLcduXa08ucH+te2RIr8T8hKdPzgkjM+PDRzSKR2JLDpzm5NLX:Sq8h3e85FquXPAeExk8odPFg+tzSKe3M","tlshash":"509302ab06de36c6e10b2e9408902d3c720f65fdcba545ad497cc743d8e5a68d48feb4","first_seen":"2025-12-12T09:55:43.277784Z","last_seen":"2026-04-21T21:26:35.605788Z","times_seen":541,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/ButtonWithAction-DLXWMp1-.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/ButtonWithAction-DLXWMp1-.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:10 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-10b\"\r\nage: 2669\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=4y6cfDHNqghIEEuTxMqEZ2dG66EMJxn6CrrVIQv_ZbE-1774113939.5960324-1.0.1.1-dzOlY1g5bXkYtq4XIatc6fYdo7RHth926FCdJV00yXqliSFfsG12v6Xa1c0g6AcRmmZp8RSQeosKhmhhReQLgTwLHh2rWwIfbGRg.o1zLGxLsObQrJM.SrsYGCq6NRCF; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e9%2FMXUg%2B2Xa%2BDtWuwAU%2Frzor2IVB%2BfRBVUeP79m86bspwXA2O5cQW5pwV3DzWzdsIZ7Cg5ouJEVsmJkEh%2F%2ByL3KU%2B1n3nGNXvpStJpzTnmBHu%2BM%3D\"}]}\r\ncf-ray: 9dfea838aa319cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"2e89d4b67c0ce532f32cec3235e50823","sha1":"cd66782d133d21562bde53ab4bf77c8e3753728d","sha256":"d8c3af745c755279a4955eb849c11298796114efe59606016a33e13402edc40f","sha512":"909db2d090af51aa3edd713ba8c6171b576535f7507409d5af21c8735726120f3812da1c036c9d58f717c15f4dd2b1321bd4ac4658db2883c6ad48901aa138bb","ssdeep":"","tlshash":"0cd0950f5451d1f603c5fdd0a22bc41139257d60f7c4c451804819403b7179dc11ef2f","first_seen":"2026-03-21T17:26:39.607991Z","last_seen":"2026-03-22T00:40:18.009198Z","times_seen":4,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galebet1065.com/api/public/v1/tur/casino/partners/751/platforms/0/games?category=406\u0026limit=12","fqdn":"go-cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /api/public/v1/tur/casino/partners/751/platforms/0/games?category=406\u0026limit=12 HTTP/1.1\r\nHost: go-cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:43 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pJWXqXK9p5%2F5A%2BbYlVuKLDp1wK%2BCg5%2BQ8lPY4VtZQTMLjNQEM%2FARAzwnaLxPyYg1ILpxS4OHDMfwT0Cx6DZVszxur3Qlv8RVCFpYQDUkiUqikh26SRc%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=IaVmePK6fJmF8kJIg0VFKLbzy8waWUIAC0l4k4BsC3U-1774113940.129573-1.0.1.1-uiApCjmDwOEF6.k_SjSRFl9AmtFTmvaYtavEPoba4_si3PWoYBwPnL1JBXDhF080r0hzJXUnpomDUcNYxgmTMGxgDPo.uQmOygYtUImQFizTfTte28.UMzH6GL0ZAGWf; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:43 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9dfea83b4da411c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5981,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fd0d965ae6f0dc364d04e0283d70bfc2","sha1":"b6eec32c8588df9375c9857e332004e505c9bcd0","sha256":"eaff2223516634bc1402a4a52e05cac4eb7c6bd67eaa0818834eb5c6100b6e89","sha512":"dd65c3f08f15f9d8085336263082080d527d9d5b5f3b23789cc9c627f14af3d0e4590e39784f9db24d52eb9e838593bdd4df7c29ac9727cb208e52a9f6393f99","ssdeep":"96:Eg1PC71ejYYvkAka1wcweYYCpvYYvxj1YpYYCNCjYYvKUYYvV6Vg01t8t8l17/:Eg1P81ejFvt31jjFCpvFvxj1YpFCN0F6","tlshash":"bdc1ad4a4d34faefbb59094074423c0d9cbe53c2aa8dbe10cc56994e60e90e567726ef","first_seen":"2026-03-21T17:26:39.64763Z","last_seen":"2026-03-30T02:15:03.124822Z","times_seen":12,"resource_available":false,"data":null}},"time_used":3473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"go-cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/bookingBet-C2_396gf.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/bookingBet-C2_396gf.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/DataspotTracking-iQyfe7l_.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:11 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-ed4\"\r\nage: 2669\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=3.afyF3B_fdGE4uRVViD6c6vOWPnpCoZjbtonV8ZI28-1774113940.3725421-1.0.1.1-0_50PTnaN_Q831o3DLHkHiAMu6XLhFzgFcQ1mht.unqhnMOpuvohAmlFm1CdAbqaeIWfsGpMcVP00HUtZxwqVQjTIY8uBFB8r9wMxqIiKcZamiwgR2iMKyHz4CwoFGDn; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I9U%2FNhpkEip2kYFYQ8tq2r0Vh%2BRmlluaed4clfm6gShDuTyRdFJVy6sLbCoskTR3wqlLr2SWrcB3EVDZswNPwAl8OoqFJUPHqaufcGYLoq9KguI%3D\"}]}\r\ncf-ray: 9dfea83e1ba69cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3796,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (3795)","md5":"382e197b84b36c2e881c5ad55ba49ffa","sha1":"f53385f540d98c26b3acd7bfe2a714778a3cfad2","sha256":"f49f90a92b84092e924250b9ba4c6d9ba49f9e1a5b7cef9c2cbf1ab9267eebd1","sha512":"ebd00bf5073c899966d24da20876fdd2296b624901691607e3e3d5dd0dd682ea0d751500286ec765da9763dc4a150be86735c8d08548888228cd3f7cb648bce2","ssdeep":"","tlshash":"2271e664fd30907e67f2317df4de7b426b2c4ba871a19a40fb6b5d0841848cbb534638","first_seen":"2026-03-21T17:26:39.649126Z","last_seen":"2026-03-22T00:40:18.176308Z","times_seen":4,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FeaturedGames-DmW74qti.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/FeaturedGames-DmW74qti.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-1ede\"\r\nage: 2659\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=fnmHTQmM60E5iEJRvHzuJN_Uknofb6lVBS1scsqq_0k-1774113940.4565346-1.0.1.1-0H7hke6OMt9LmDknY6AeWBIxt0ZZdMnxw2Ic7RJzc9S6_Q06TvYm81To28SbzisHuOdSJalWf2JXIFqcxg.cwwb22WBFksf6ashJLgFJYXC6tiBbFzt46zMf9mDQSbWj; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAceZYd7RQmBekeHuD%2FM%2B%2FVEZnCtl%2F50fGlH%2F6ekNnftHOxDyUAGCzdnameeYJxQrAYuql17IKP7z4q%2BmzIYQP5n4aytbonUb3owaPwOC5wzspQ%3D\"}]}\r\ncf-ray: 9dfea83e9bb59cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7902,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7901)","md5":"19d9e6b05b0ea4c2aaf5ff097f62ec60","sha1":"74da87d2807e21cbebe3f99804c583b50dc62a6e","sha256":"1008f34230526be542075acb3e641fda44c1617623c017461ba74c923b97e742","sha512":"c59507f99048474eb0597fcc27a39d06f2b2d9231d85354a2d78d12c6ca76c71b2a90f1d4d56984429591c0cccefa143a20eeed9eba60200d42da244f93e5375","ssdeep":"192:xPV9D3fNHnEUDuHDY2bBEoOhC62JmMwL4Bflg2yD+l:FXVHnWHVbBE3hmS2Sa","tlshash":"69f1fa0ae015fa7de67b49e7b53f5108f47a0ad0e7280890d07e5e1919e9246733ef8b","first_seen":"2026-03-21T17:26:39.389562Z","last_seen":"2026-03-22T00:40:18.039261Z","times_seen":4,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"rgs-wss.galebet1065.com/jackpot","fqdn":"rgs-wss.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /jackpot HTTP/1.1\r\nHost: rgs-wss.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://galebet1065.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9sypUFtDaWcJrhAO1bAFlw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 21 Mar 2026 17:25:41 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: e6gAhZZwJyLv1iYkXJ/BxiVG0is=\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cf_bm=nrn3f9a_fEevHFhqsbbUaEAssGAj5FKhEZse_7bnRDU-1774113941-1.0.1.1-XQq0Sv57x8G1.12HkLf4kbDqDXz1cKXcPTcEHbKGtHWZBnVcuQIjLm6lI0abJf3FnXJUnGP9EyGqDm018GkgwqLMMcfQIy8EAwggBQBriIs; path=/; expires=Sat, 21-Mar-26 17:55:41 GMT; domain=.galabet1060.com; HttpOnly; Secure; SameSite=None\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2B2X2SjrzUC1zMphXBTKMtC213dnGt0iKzcdyexgAYxPp0lXqEOn2FkQjErZNDB95UOlNRjmeKlmU8cgKjId%2BYUdHPPFE536nt0eykO7BrD9Axse9LQ2ICHb495Jhc10To1eO2DWE9YqeA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nServer: cloudflare\r\nCF-RAY: 9dfea8449d4b76a9-ARN\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=80819\u0026min_rtt=80694\u0026rtt_var=30511\u0026sent=4\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=2837\u0026recv_bytes=1559\u0026delivery_rate=34860\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=e3ecfce1938d1dd4\u0026ts=182\u0026x=0\", cfL4;desc=\"?proto=TCP\u0026rtt=7854\u0026min_rtt=7796\u0026rtt_var=2243\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2356\u0026recv_bytes=1449\u0026delivery_rate=371234\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=f90db1c175536747\u0026ts=660\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":39,"connect":46,"send":0,"wait":650,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"rgs-wss.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"rgs-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"rgs-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"rgs-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"rgs-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/localConf.json?v=1774113900000","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /localConf.json?v=1774113900000 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:25:34 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-1177\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=kr7R9fbQ0kMhOBg3ie.ljCgpRTIGDrScrVW8nS9ROlE-1774113934.4861736-1.0.1.1-EVz0p.uVzVZi11V_WEWFZTdvYBuvexFf72uhTBFAHbFuleVoFXrwh1dy03rTUII2abClWnkoAsRObZ8anOw3IcV0uK5Gn1kzs7_UmyKX5oXHzPUdMRCbRfE1CGINeDv1; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sz49kka126qAFlS%2BurGTloPil8FtRZ9GyQV1tgBt%2F2S1emphSK9Lw9stvexlDJDtwma2rhJokeTsWfjm4B1x65mrc01ewpUlSQRSGaB6dYZ4xQo%3D\"}]}\r\ncf-ray: 9dfea8186cdf9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4471,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b406e9c7fcaf80e5ab91f27ea0f0294c","sha1":"54ddf99952cf9b0fabd829928125026af457240c","sha256":"a327cfe81199467e7773a331449db596ff5a5da012ace64d4ae1889c757bdf15","sha512":"50bb2149cb4177578ffd52d275d2f399922cf5dc4fe93ec9e32b840532d1dc7cbf148a136fc965a7e353fab249d5849f33dba3146a47b9f8053a574661b71f4d","ssdeep":"48:YuTyTbGhzyQnA8qA+9nIok/we+NPhwxbwPAjgCfk/wWp3Copi279lMFDQJSLhHan:xu2ByQA8qAHTwAsAjgCuE56szUn","tlshash":"7391cc9d31458cfec75eeac3788b679f3042811387982c06c27cef4c5676f19650a2ab","first_seen":"2025-12-24T22:39:16.189594Z","last_seen":"2026-04-21T21:26:35.738145Z","times_seen":53,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/homepage.json?v=03/19/2026-17:16","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /homepage.json?v=03/19/2026-17:16 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/tr/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:25:39 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-938\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=_Fghfwto05OAXCk0KzMcMqGCxiDIbfj7hw99gviTIp4-1774113939.460011-1.0.1.1-GcEsUQSlRst9BGXIztIgg6uZJc2z2VD_hEcf3aDz2ESkhUkwsvOxnuG7X_rry26is6v5sVCSJnm8WTCwrQ8G0qwdgoYfxyDQL3RbCwvZe51pSIQgsW5dTyUvh5swoUdt; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wrDf0J%2BnOmtI8Xf9XFalry4Xgbzz9W6cTDEr7wWJ7P2jyA7Xu%2Br0GDKxVcQDCu48SEChXjp32jE3KO11CVMtad1N8PF4mOHMGSmymSwOtqUHScs%3D\"}]}\r\ncf-ray: 9dfea8385a209cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2360,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"675b507b70f39e07be8925f75058608a","sha1":"42590b5b7e3a6f6bc8551077e3a98b0caf859e48","sha256":"947b6764624290fda0991b5e06f0cc8ec17f469fa6ea3abd374cebd9a25fdf93","sha512":"a11bbe53280dbad32c58212b454a474a02a254a4704964cda44d191e82e32cf6dbf79afb0329eb54200f9b07a4d89a5342b62c726bbe3aa8fb0888cfccfdadaa","ssdeep":"","tlshash":"39415d3d6c10deb8b3a08a23d28267c16546d968c7d44c5c1cedea6ad3ed29d1484fbf","first_seen":"2025-12-24T22:39:16.115426Z","last_seen":"2026-04-11T18:43:32.51484Z","times_seen":27,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/CasinoJackpotPools-fAp_tFNt.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/CasinoJackpotPools-fAp_tFNt.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:20 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-371\"\r\nage: 2659\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=oo4OAho2VuBdC9oRnwracQX2WHmYrgk4R2DssP25zlo-1774113939.9920888-1.0.1.1-xSNyhxUtsbxWV9yYTWWYeixJx0tlMtjSXHV1DcNueptfLwRqUWv9V8e9NYlPVMR70W6GAq5kCqTbJ1iX8ERha9EhtQ3cgnhpnx.TCA41ieiPfbGLRiVhxmHrtFHz4Dvi; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8n5EbmDxep0fNF89zik4kfnLQ%2F3Bh4GnqsO6NOzMFyDRao5Nz61fO381esaJ3RlWhHnsiJwrl34DcaLP5SwrxBMvD6lvD5djaWXo1NnttF7zf9w%3D\"}]}\r\ncf-ray: 9dfea83b0af29cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (880)","md5":"5918d349ea75aa702165e8b092d3b0fb","sha1":"753be348a9b1bd9cd842c8d6a3df0ecf613f9226","sha256":"7a95ae3b8b2ad563cdfd333ee422aefcf2307238e68e01fc031003f559450718","sha512":"de4df633ef185ed57d2964b09d2bbaa88b47a08b90463bfd9677bb3c6bd777f4961ebbe889a80df9636576890ff9d1bb27a2e052618458bfe4b1960a5e9fc248","ssdeep":"","tlshash":"0211008bf02bf3f4c88c08e14079495a073e2f7af71181c0946c5a285b66847f5a87c6","first_seen":"2026-03-21T17:26:39.606633Z","last_seen":"2026-03-22T00:40:17.962048Z","times_seen":4,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/useSportData-D5mIIwaP.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/useSportData-D5mIIwaP.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/SliderMarket-D-md2TM1.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:25 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-6ea\"\r\nage: 2655\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=RPT7L9G6GQbJvfKQlO.SNkytV7Qo1b8dmggeD1.H2k8-1774113941.4902365-1.0.1.1-VGHwKk7L.kaf1X3pFFC875pbAN5PVguXlFWz4c9ehPvxuHSuJXjxwNVTnPugjo3azDJqahtkYo.gVj4DjuF7h4rTL91f3fI5N2vn09l2SJ7f5fiEI.kT0y0Ly6J6ipJ_; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OqpBTpN6wuxs8rk9VHzkLbP2u456G5GUCwGWT8byqEb1Lbt%2FGkLIXZSs67e0Z45%2FFwqO30HzZmV5ulX37ozqG%2FzrRaacdvYldxrbQD2oxUMWC9E%3D\"}]}\r\ncf-ray: 9dfea8452d519cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1769)","md5":"f7bc8fc6052d5a655061f7542db1202c","sha1":"aab80cd0d185ea5888d946784ec94f8eabca2227","sha256":"d61d6440417a3709d55589c4c2f270ad4bc8a5639a7d27a9c0cefaf90a5212e2","sha512":"f783b09da3370e101d9e384a486d58f3bfde3019d730eef3934a85e1118b581dda88ecbe89de383af7011cf602f7c77da49aa063faa46101b264cdff3a3f36eb","ssdeep":"","tlshash":"b131874cd074b070953944d5d1ad6e14e434191d3b32eed1e85c0a197b6368e027ed7f","first_seen":"2026-03-21T17:26:39.579526Z","last_seen":"2026-03-22T00:40:17.780877Z","times_seen":4,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/454.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/454.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1236\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Apr 2016 09:02:11 GMT\r\netag: \"f1d68e803e92d11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 15 Apr 2026 22:48:36 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 412625\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=oN9ULasGNe1EghKrDYrc0EAR3rxBvnjPi.nWVvTu05g-1774113941.6174622-1.0.1.1-ZEsoH.5RPMcmzgbcciJkJ0yF8FJmRl5GjWIsZztvbUsUZzzwM9uKR9yiF1R.aux0CgmV5vAjoTWl8IneGY5cRCIp4h3UEEI6XIonuAr6XDUSSfjB22fHI1G3XPQ1hPkp; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6xvJfiejEG88QkNFg1Oi2dWwPnabie%2BipU2NLa63t2lw%2BAZeJ4jnvDdAUfmJIQyEJntDuO%2F%2F6WiyCVJgE9sswufHRRQ3bRyFDOqqD5yiSJGgm4LtO7PCbaTa4Q%3D\"}]}\r\ncf-ray: 9dfea84718bd5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1236,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"afc3a4da5fb039d37bcfd50861d4954a","sha1":"ef9130577e78a52760a6d45ab20ce2c155c324ab","sha256":"bb958610492c84590233b0d30c27e5f1d5fc320d4ece0f29c61828eb349b9fff","sha512":"d1fbc915e520885b5baa728288e7508cc8abd0301d36d14ab4d8fe1a5db86c8e67473c97e668cc758bfe1334970b2d4ef6ea16cab64c8160421f1fa05be1cd8b","ssdeep":"","tlshash":"b021eaf33d809e7271c160b9576bebc011c5637f04616384b5e5f2b40d2ae8671d56f2","first_seen":"2023-09-18T21:18:01Z","last_seen":"2026-04-11T14:11:32.539264Z","times_seen":362,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":27,"dns":3,"connect":1,"send":0,"wait":16,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?render=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:37.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"30:09:A8:2B:50:A3:5C:0E:2F:11:01:80:FC:9D:20:3D:1E:0E:65:96","sha256":"A4:2D:7A:76:57:2B:43:3A:8F:A0:D3:F3:1E:A4:E0:04:33:BD:AD:1F:12:67:F2:9C:D8:4B:7D:42:6A:6A:FA:35"}}},"request":{"raw":"GET /recaptcha/api.js?render=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 21 Mar 2026 17:25:37 GMT\r\ndate: Sat, 21 Mar 2026 17:25:37 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1013,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1013), with no line terminators","md5":"383b0ea01b33567b53a79051a169e4c8","sha1":"48210a781c5b0e44fa32949a209cf7671c8daadb","sha256":"5790df718df4241261c16ddf7796fadf57d33a04c16a0a795138ba9f424b0b73","sha512":"c9e831055aef8857f5f3d2b54008d695982bd69160d9869123b19191cde633568b9b1e6ef6d1af915b65f35318594b1c10d8daf729b093dced8f4f263e88f622","ssdeep":"","tlshash":"7e113eb22a06b0350b7209e1e1ffcbb5e852741cf15c89d8a912cac42faecdbcd05685","first_seen":"2026-03-21T17:26:39.652855Z","last_seen":"2026-03-23T14:49:47.264151Z","times_seen":6,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":86,"dns":42,"connect":21,"send":0,"wait":37,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/menus/app_menu_751_tur.json","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:38.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /menus/app_menu_751_tur.json HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:38 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:25:38 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-1adb\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=lTXbl5lDrU_lmkARpKJS4tGdZJYhUukTj9nljWEH5IM-1774113938.786164-1.0.1.1-kNc0QaQ.yyWQb3TBzkFkFFPI644i98DTpKJqYxdfWoak91YYTQbLFiTUiUJH36jIgvPjyq_FXk4Hf0jPX0FwrWmOfk3aj.rklwV0fJLoqv2ZMXu6RAZT1gxKZdH.XDKT; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZkcRumh68Na9Be5z2NxGQXntZDZZsGgU5M%2B3GNTVJ27DvXWTXw8P8Se%2BrMJAAYjyHJVel0i6aCWsXlI170LBXtsk58wfyGPsVujpx%2BsCLreUnM%3D\"}]}\r\ncf-ray: 9dfea83449a49cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6875,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a341d5884944ed085b5648556ea79ceb","sha1":"fb229ad23255667cd371ff03319813a90df65b0b","sha256":"ea9221c063848a89fb47875ec7199458219f38919fd74c2e91b42886d6ef2edb","sha512":"164600a6c059e90a004a8793720b36b327e16b22de1b1ac1c2d859ba1e5932229f80e5478a7653c51c3ed8739b5e900683d2bb0c6fcc46854046988819474c72","ssdeep":"192:SSkcUlkiU+kuSkAUdkuUQkZUckTk2UUkoekIU1kvkq/UKkJUdkpaUAkvSkGUlkM4:Svuxuvi7iwbCCMjHxvv8MvQqzaKTi","tlshash":"ade10702f01d5976d30c3e00bcc76d5b888e50996c9d19419e4d8acecbd649fdacb6db","first_seen":"2026-03-21T17:26:39.654441Z","last_seen":"2026-04-04T19:51:35.181576Z","times_seen":15,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galebet1065.com/storage/medias/galabet10/media_751_d95c491056861c55d9808002ec3083fb.png","fqdn":"cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_d95c491056861c55d9808002ec3083fb.png HTTP/1.1\r\nHost: cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 2125\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 14 Dec 2023 08:21:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"657abb27-84d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 9725\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=mvREko75czuvtUw_x5kbJ2CGgqM1AukjdYqArIu50yM-1774113939.874732-1.0.1.1-0RvuRYyR5DT.Z0bDBM_urgeDCZofEFZ1uj6toYApi8KLlDQHBVn5PWqoMZcOXEJraFaO_ogBalDLHHGZqmwdYYx8.KYyqUFJB9Y0jq.ef22u114takDs8N7wO5MqPBSO; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2A2sqHJwVf10tvPzGziE4Fhp0kkGG5HeYCR3TFrWnZW4UrbrFeWLrPSigCyteCjwIDPAjPMp9unRfPiJ%2F%2FkvbKENq%2BB4ygTnpZD9izCexrGb9xY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea839aa799cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"d0a6f672bc6bd2e097de029109a7577c","sha1":"228e47b53bf80adec61493761d90165771a81012","sha256":"35dc3f8b307cacbf717f898b6a669c2eb188cc425a1f356b94132ebc7e8441c2","sha512":"7a700fc3f2a2cced35def804efb78f631ae965591bca74fe55eb23a593f5cd77cdb31f9f947e8614f0ed1d67cd29c3b25797fc46d9d22f6788bedf34d84bd8a2","ssdeep":"","tlshash":"7741eaf57111586cd591a232475cbdd2589db408d035d507fea3ba2c7c3f17814c32ae","first_seen":"2025-12-24T22:39:16.220215Z","last_seen":"2026-04-21T21:26:35.582153Z","times_seen":34,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/PromotedProductsWidget-Cu6mpMj2.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-Cu6mpMj2.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-84d\"\r\nage: 2658\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=BGteYZPBqV.KbRcm0du7oyZ0rG6_CR5fXDoz9hTHAUY-1774113940.007989-1.0.1.1-HgA_iUxL.tQgEXz6H7xb3AhAKAl8Yi077HV5BegzUWy1QkcsFXFnMB4lEjuX0lmna.FXyIBNRxRhm.qVgeGDQaipoKVtxlWA1_uLoqHk3aXBruNZTzZW6TLCCQGi9z76; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PaoWOYCaz5bnVi5%2BMeLsdA53UKKV766egfuX%2FCBUGjV6zJpxONPP%2BAK1ri%2BP8WMZ2MrrdBIxmLD30h8ZZJxPLOV524%2FHEiCSytHCaqzVqIXZiN8%3D\"}]}\r\ncf-ray: 9dfea83b0af49cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (2124)","md5":"7c3153e4aa4ebdfb11edb1ceb74721d7","sha1":"63a1c4e73b113fc5a7cf75360a42fa5e1d09007b","sha256":"0efd8b0b27b02dfddaef49296858ac0af81408ba031a3ecc38d2362f5b57f851","sha512":"31680001416098b2b40a7dd8905262064badc782cc6f7c7fc22afb10da2e29273384113d1b522894f476cf38f68e66ada739b7e8b3d94ad2fe13cb74e2086723","ssdeep":"","tlshash":"5a4175c2d838b2baf63e5cec214510c838267d18d96589b56077bc1a9139812bb57ffc","first_seen":"2026-03-21T17:26:39.657319Z","last_seen":"2026-03-22T00:40:17.80938Z","times_seen":4,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/VideoBingo.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/VideoBingo.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=IFF9KYTQXWy4J9CsXIJqotY5vf4uI.0MmTOLsNrV2HU-1774113939.656739-1.0.1.1-jktGphsUuPZO.KATLNk2vyE5nKX7owSi39k_udeDFQvrakvmO.7C34oMksCePGyffRcx8HqWE632Zh4rXLmeeDWLgtU8yDJYAiWQumU9HoTtbcFS41rnyx6dn_4nZxYB; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKxweWXFPsLZYfSAQQNyGO89SdIoqs7L%2FcaPMWCDVRH9Cbu0LFkpqU8YlQbC3v35Pnx4iuq8A%2BHTYbIVCul6WG98yjtnIwrjcFexMQu%2B0GfSLhzinQ%3D%3D\"}]}\r\netag: W/\"68627129-7c7\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838d88411c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cbae8aa582bac1aa011b5159e475a38f","sha1":"0d140fc00b303fd23250218e03c28ccf986a39c7","sha256":"dcd44096973914fc9f8fdeb79a3dc5379403c3d1411854e634ab7fe444578271","sha512":"05e2c75c337a1fad9f895fa0b1635725d1681e774084ed34084444508df8dc8501c01644b19ab4f9a948c1e5b6621fd67df4fec41eaaeaf187d1a9e90c58244b","ssdeep":"","tlshash":"e24133d5e7b0a6ac2ccca59d6f2148d7350ae0bf6db36a5ce22edc580b53e1c0611c99","first_seen":"2025-09-19T18:19:26.310809Z","last_seen":"2026-04-21T21:26:35.627448Z","times_seen":50,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/UnavailableMarketEvent-CEcm-hzZ.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/UnavailableMarketEvent-CEcm-hzZ.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-134\"\r\nage: 2655\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=VcpWcPvCgdG8Cqnl9uq930HKnr.i8mKISOiz5mJCQMA-1774113940.0499794-1.0.1.1-qVAA7Hw8SWj6nZ728kciLT9Mg.xav9qnT7r0HOoI.e6_xc.gAAnWDU9SdWFMoEqEkz08YHunp54O3LT7MwjmrZA0o9t9NldieqbP0n87KkCxxzXhGJmfftNAOuSeRm6j; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NP2Z2AdKXpy9KLg0aHaRmRJy3hB9ezOpnr9jS9WyZPnGFIx3mvL33WGsFYXo%2FgBtrbTXIhsggmNIufmIdc3NvhUNRNsmaS1ArikEPlzBa7OJ%2FAY%3D\"}]}\r\ncf-ray: 9dfea83b1afe9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (307)","md5":"0b0ac8ff4ea1cdf1c6e3218d90af5f8f","sha1":"560311f83f0e70f7915a340a709fe175752e98a3","sha256":"7ae2345a86ab8a00f2b0a3019769022692d90986cb2a311f42aacf61a63cf460","sha512":"3d2d8cf095d4b2a186b587501f0908a86da704cfbce63b6f5943da761aa4661d7c352d57164d1ea49fbbf8a17c0668bc008b062f0fbf409e30b41ed85dedbd78","ssdeep":"","tlshash":"bce07d09b004bbfac02518ccce3e4f0d541207a5c7e945d391a910181b34261350ebaa","first_seen":"2026-03-21T17:26:39.660084Z","last_seen":"2026-03-22T00:40:17.841734Z","times_seen":4,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/Tooltip-BFFrse_o.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/Tooltip-BFFrse_o.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:20 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-334\"\r\nage: 2660\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=OQah7IWIpnANhAzqgqvZ9WMSpx2jtThOY0kCQLQxKOk-1774113940.8454325-1.0.1.1-z048pr4Hmp7np4_6TjIRUbe9PhndzJICAUSr_xcCYQ9e7vXvX9pvIgYv0dM6hFMg0QkyWn.wcLEZW.sfk7O5D2DskvWdKdgZhlTYeUpXK25hLkqVHCB3XmIK4RIhQ9dM; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kbma7v5rPirNjKS2V27gUDsvJFQTRQtQJE1NjV77vBV4hj%2F2dtyOivsguip1dEjw9SXPfIfQ613sMPvOWf6Nky%2BZU1yGK4rsvYBL1%2FScGdtoYEE%3D\"}]}\r\ncf-ray: 9dfea840cc1c9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":820,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (819)","md5":"5dbd6b1605963511da70c190fb431076","sha1":"32b83b773ff51e26a8bd8f6aeff9240609693883","sha256":"f8a2abd269bc866e1a5ae41159e53934a8d94ba6f6f8492eed8485e7e3d4ea31","sha512":"d09ba6a204efe8e82fd72310385d53c4c6fc14515407c0ba66c041ddc19ba91768fa100d5ad439a6362d8a263c8610e9a5bf86cdf8310dc55ddd146b64c2b9ea","ssdeep":"","tlshash":"0f01c246e032fbf4a17654da142e856d7153266c7e2f58f16038058e0ae4984d317b8a","first_seen":"2026-03-21T17:26:39.364122Z","last_seen":"2026-03-22T00:40:17.826468Z","times_seen":4,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/459.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/459.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1536\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Jul 2023 07:42:28 GMT\r\netag: \"87e5d695efabd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 13:50:10 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 12931\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=As1tABWSB1S93pJSF04CI5xPguj3g4U6fE2PbqKSF9g-1774113941.6097302-1.0.1.1-B14NJaqHx6H91QoB2gSZiuWRhijajYYwxCXj57.BxSxDgJQ1Tzt17wSDaeUwBWq_56.btybJ2mdQrA9mw6azl8WJmzC8zsESvjwMTliXaADvDLaDyWyA5H67Ict9czSU; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGcef8CUyUqbi1nMGTMvgezy1M0QPhXKLsucEkUwtaUzC3iEIdpnbNpfYBz73oUMAK4p70RX4xEHYzPgtq%2B5JP2sq8WApjENFOqWE19B%2F%2BvIsiCVi%2F5tz47gDJg%3D\"}]}\r\ncf-ray: 9dfea847086c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1536,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c170eee63d41ac7ab51493f7390ca364","sha1":"8fa7adeb23d679469788e787637d020190ca4e57","sha256":"f541b4b97b1604da29a2632ddbd3a3008b0794397bb0937f94078414d04965a7","sha512":"498854019e89b4120a56cadb29b9a77f138286bf18c3869db0c0fcd0afea62949a6334bd0cbc939f7fbe4878147b49e400b8e591307762e58435eedd80971ebf","ssdeep":"","tlshash":"5a31da157e6e387cd21a41b2183254875819c37b07e9159de715cf2ed9428ac40f8bd3","first_seen":"2023-10-14T20:01:15Z","last_seen":"2026-04-19T18:34:31.307557Z","times_seen":234,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0aef27.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"89134e892271c99e4be394e757691c0c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 732559\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea82938bc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11888,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11888), with no line terminators","md5":"89134e892271c99e4be394e757691c0c","sha1":"7e8e00a94406382ad3006aaffb6ba522a7172077","sha256":"d09d7f32db5774ee049fdd2fce086b87d897c6893753091886a8706e9747c9cc","sha512":"df656841a2fd8daa388e0345bb36bda46f568cb5b7f05cf9b10673227ba36da20c35d3fac4f96edc411475e93805cddbd8f85c545cc1d7c41aebbfcb9712f089","ssdeep":"192:0H9MawRIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:Kwb9HkS316xAFKpLZEh","tlshash":"6632a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","first_seen":"2026-02-19T03:13:10.639989Z","last_seen":"2026-04-15T01:21:42.639775Z","times_seen":6484,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"77424425bd755d02077922d40a96c207\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 831623\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea82958c21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"77424425bd755d02077922d40a96c207","sha1":"9702eba70ac4506031d55a8c9cf6732a66853b2b","sha256":"1128f463d0038310bb65c71ee2bd50f52e40dd9dfc0489e127f3912a1aa728ce","sha512":"2ac723d6ab08dc1cf45141cc44966d9b0f01c892511f40148d785de61ac084e014799555bb3b574f6f8b78e9410df8c112fd437eafe0aa747babdc52b451d1a7","ssdeep":"96:zNC9Hqt7pEma7hY/rcKaJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYcLRIvgx43nVY","tlshash":"13b1859ef247b456c156225150ef3b1df33a281ca61ccdc8a66565f218784cba077b39","first_seen":"2026-02-19T03:13:10.646706Z","last_seen":"2026-04-15T01:21:42.571941Z","times_seen":8490,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-CUbLXDx4.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:37.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index-CUbLXDx4.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/WagmiConf-B0zYIpvp.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-466b\"\r\nage: 180\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=4tbLmnAFwrSgszWPhyl_SVsOOmYSZQKhpio3XAQvBhA-1774113938.0674098-1.0.1.1-RoZABe_rqCm51ChqlU_eu3wsLicPhiDdJri2XltYbMGWX6mDwJ1Wow5z5D3Eth9J3JfXHam9PAJiUiPQi90MtWSWkzhQo9zUnOK3qqH5NSt_0Et1XJso5cjiAu2WsXzt; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yu3qkAruJ%2BJcEtzBYS0Gbh4xoQQYcz1xIz5zVFuzOPtsyUeBvI0eCZwgttB34te8TwDYhIpRkiZz1lAQ3qmxFeMlSbdzYjNq7IexTY4xeRSrXug%3D\"}]}\r\ncf-ray: 9dfea82f98b79cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18027,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17806)","md5":"f6345e5eb50070d1207ee46af95b1cf0","sha1":"8f5cfa73b1aab00daee26489e596300ddccf15f1","sha256":"ea360197e86b31d860efe7abfa07659d673d5508072c4a9f9494a0893921c804","sha512":"99726a9e011902acc4873e4538ad29c6b47f34c6e64550a2d9d37c97ee22c9d772544d3f33fcfa9c6eb16cfab541e5ac981fa61b9875a8bf8b54298bb4e6df05","ssdeep":"384:fvMci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJ6:XMci408FFnJrIjE3D/OY2E0xqpc1NKkT","tlshash":"818209d0e2b4f7a642e8aadd80392074f2208c2c347dd0f1b6b6edd974664ca956dd37","first_seen":"2026-03-21T17:26:39.594746Z","last_seen":"2026-03-22T00:40:18.08786Z","times_seen":4,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galebet1065.com/storage/medias/galabet10/media_751_609aa2021173dbc7867be74ac403fadb.png","fqdn":"cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_609aa2021173dbc7867be74ac403fadb.png HTTP/1.1\r\nHost: cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 2609\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 23 Aug 2023 05:40:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"64e59bc5-a31\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 9725\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=hItvW2a62wdd.ECTu2Ou60OK1D.2xW3i5KPvGDpTmao-1774113939.8517153-1.0.1.1-7dCWZQuTek5ZM_Z_v91EftkLYxhfTCffJFratMOO6pX5GDoadmBPMr130hw21FojqmUlhjAsQR83r7jADe_YD5SAYlUQgq8qTwilpXlyyGoZgnKRHNgBxiMgTvDHtyUc; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bXNs2EVvRWEkRX9XD%2FQe716bOLUoTPKF4sII3a%2FbzlvMIq8oD2wAfXPpHziAbaWJxCzsnLpGmXajypV4zsOPmBWNsaAB6RMnecYrVLrhB5mYTWw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea839aa7a9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7081c9d3ea2a6fa19a82d1f725a61d11","sha1":"3c161f97bafb034eb192b0ef890a5f2e4b3d39cb","sha256":"61390467d0ee7bf0ac7253d9128af3b18943ddc4effe0ef415b1d0ab9e4da2d1","sha512":"0c2e13235adef124de8c8fef5009e25cd362690a5865db9e3ac68b80d9bc4f6e30f13880416a42206ea81cd932ca17912a2bfeee7ade6f647b0c00f46b376a39","ssdeep":"","tlshash":"ab511cf531120e38d6a470339d16dec67804b445c4afc416f992eb2d3da61a478cbdb9","first_seen":"2025-12-24T22:39:15.996531Z","last_seen":"2026-04-21T21:26:35.762539Z","times_seen":34,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/useNotificationsProvider-B6RWZkIU.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/useNotificationsProvider-B6RWZkIU.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-5c\"\r\nage: 2658\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=KbCHmFUEIky9DRQ1uNzbLfna5wU88JepKMtIxnwyHkU-1774113940.8828783-1.0.1.1-6i3GjB7j.7TWm.8d5Bi4hSNFFlvja2rSHdin_q1ua_Lzxe5Yz_aOYrrKwTFgUa4dHys.OoGVZIgpcXb9gHneKhPlYo3WtUZP_TjZagBYsgiItI2N5KZCEDsSY3i8821d; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ImdhbIo7Krzq9kYAfnKDq%2FYVMO%2F91IoIjs3f5UoZC6YleLl5v4Ht6J7p%2BmkRr%2FghjpUgxblYeP5mADWpZ2CBrF2Aagu20jTYvDNc59qIyefFoAs%3D\"}]}\r\ncf-ray: 9dfea8414c419cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"6a107b604ba11023c433398a7069f684","sha1":"530390a2949705378fcb2a483d2706b3de06d63f","sha256":"3261bee16420406d05ab5271fe9918ae8c11452027b028fbddee83b242e8c5b0","sha512":"fbb4b371e140541e0af34872e340d31d851f73ddb1b6731fed79b3baabc34f36179628277717b3d6fe082d81f0e2940e4d4a551a1ae0e1d89f4937a0ec0c5dbc","ssdeep":"","tlshash":"5bb01213485053f1210108ec12264c290e30083d3381cab11030414811e40c5930e905","first_seen":"2026-03-21T17:26:39.536834Z","last_seen":"2026-03-22T00:40:17.926035Z","times_seen":4,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato|Lilita+One","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css?family=Lato|Lilita+One HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Mar 2026 17:25:41 GMT\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2f31f582a62929942285136edb852eb4","sha1":"ade05009e3f52242452d23f325d0d60eb2f4945d","sha256":"86d1d33f6f9e190954cb9cf8f930c7ce03e60bb102b64f2ce0baab352285acab","sha512":"2e4b5ff5cb64ede4c3e63e2477f156c55597e1c3ddd83d888fd96c66bf7cc6716dcf522fad19cdde2a4a564f530022feaff488500797d01f3673e52e295ddabd","ssdeep":"","tlshash":"6e31bf92097ba80497930dc212ce7d32ef1e62406845a825afff18dcfc67c699362b0d","first_seen":"2025-09-20T10:36:49.753015Z","last_seen":"2026-04-21T21:26:35.821969Z","times_seen":104,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":58,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_c372c2b09b76d984de01cd2413db3fa9.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_c372c2b09b76d984de01cd2413db3fa9.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25320\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 14:02:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69401512-62e8\"\r\nexpires: Sat, 28 Mar 2026 14:43:42 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 9719\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=Bdu1tFE3VDXKwQvoLV24.1hZzsAzRvBOaaS3oPIeqYE-1774113941.5838938-1.0.1.1-hgUqO3ClodGXYJ94I3p2FBb171N_UepJXAubftEGofFQjp_Hxt7eHHT0eKppSm3fWMcP9Hxf7Y6S2sdaogDD_n1BKsqRhVLbOzR3So7jbfp3jxsh9m4FnLSZPrThZUUe; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FBIhLqkDCpU64IMeoVPv5uaazRtVeYOfdwBh8oRuzCWHN8zjddWOQwIdmt9R%2B2adLkYxvepfM5YHoapjpV6ilXFDOZskvHUFeiAuSjQVM0N17t5lSw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8451d429cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25320,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"acc869e91de526af3cc37efa5e7cd714","sha1":"96a65c3c5c64e544be0a75f42e7578147811db69","sha256":"57b2bd8ba04c5fc5617770502b74fbcbe449dbb22377f04e8042147dcc5da51b","sha512":"d35b2e9c750078007a66162e0b7956edb0b85f33f4e5fdaa25c83b7a4bbbb8e7540ff6eaa60d012ba904f0254bf0d35ac531b422eaa44763a785f64f01442722","ssdeep":"384:2AJyeaoQmlt01QNg7DPEqZK5Ud6nw4Gw+Ma8iASXoK41z+I/gYbz0n89B/EV:ZyeaoQmlS1BL6uwLHSYK41+Hc0nce","tlshash":"82b2f1b0154ab6d3708548666c0d3e9017ce8f5034ae0bf4789020229765f5fe4cfb9a","first_seen":"2025-12-24T22:39:16.063814Z","last_seen":"2026-04-21T21:26:35.566999Z","times_seen":40,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/769.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/769.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1396\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Apr 2016 13:55:50 GMT\r\netag: \"aefbbd8679dd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Thu, 16 Apr 2026 14:05:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 357622\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=h1WZrvFLqhCHKigzeMiPDJOSrzQRLRfOx5LX1Nmp0EY-1774113941.6168873-1.0.1.1-YONFkyrT3dgD.IvzKGnbSJ7crJ2JWJ0wbc1o2SizjzBj5pHcSluXi3Cf1P9e4acAF6DuWURVGfoUzLXvXFntTnmZHl30jWyNRSs28pHb17zdeYS7_CFozhqxl26aZB7a; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ptp38oWs%2BLWOJZAPv7iq7%2FYpr9qh3YdyKv3mEZT5iWT5zQpd0P%2FoHVLZRHgRcddU2Em8ScZkl3jMm1epHKX0vBfQoA3Zhut%2B%2BEbHMeVj9tHnQmWM7pT1m57hmg%3D\"}]}\r\ncf-ray: 9dfea84718b35a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"dff320bb926338374d529ab315c6901b","sha1":"09e10d2cc4038422a9ede4cebc799ab35bb802fd","sha256":"a12b833639370e15b26982d37b4d09ad83fd6220e119e63d80e63536e16d5244","sha512":"62c69dffdcc7fad87c7a8fb6f6a1e00df70b48510cd4254c4aaad4c8a5801db9c80850c822665a614d774fa94e2097d37e2d5325f2304fc0bbdb7a483d9ebe46","ssdeep":"","tlshash":"a321b67bb7aad8f5c165af0e8281b508a85720db620252596d3ee188537934ea1ac934","first_seen":"2023-11-07T09:35:11Z","last_seen":"2026-04-21T21:26:35.713406Z","times_seen":120,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"ce7c2f1d3256f84d0760bd9f400963fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 660867\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea829c8c81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23063,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23017)","md5":"ce7c2f1d3256f84d0760bd9f400963fc","sha1":"1375bb0f0223b374f9805cb441970de2cb004591","sha256":"ff92cac16c5ea67e7df480d38f6fd806385a85e69d13da5317ceb3acc469af62","sha512":"3f33f2cf811797404a3bdd12ab6af60b5356bdd577c82e8a97ad7d4cf81dcd1b24bf87c1256e175a6ae6f44d0d2f9c9daf8c29316bc60b370288f98e78e5716e","ssdeep":"384:Wgfco+ziLwH0Lg26/tFTiBB6TXngxYe4fbFU3xi7Ur3K:B+ziLwH0Lg261F2BBCXrsr3K","tlshash":"efa2dbf5e47b10d87363c02293d4f2685499f370ca8adea1f52b661c49e52763682efc","first_seen":"2025-04-29T09:54:46.086393Z","last_seen":"2026-04-22T00:15:18.984932Z","times_seen":29057,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/header.json?v=03/19/2026-17:16","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /header.json?v=03/19/2026-17:16 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/tr/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:25:39 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-e1\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=e7_tJGJHbLmVxqrHsjFP77zf7ak4oe99kuMBC_K9eeU-1774113939.4514089-1.0.1.1-PjA._Yu5b_TUglpusbKzfdWg6sn8AM8_SnosWa8XfdtIe0Wu27HiFDnYhQB_83CUHXUaMYx8JAAKVYPJS2oh073xOzfnZtYG2X0vAno0KU7Hbi_Vo4lIFz5x.lzki.1V; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hJ1OmH2wTxHsQ9W27%2BaUeiPcDll3qtq6Kclr2J0qPvr2iHu4R1puHZ893l%2FUa9G%2BVeyrbPub1JHMhcd8%2BsKf30qNKJOMMyJ1Y9zhVVX7TXfX%2FMU%3D\"}]}\r\ncf-ray: 9dfea8381a199cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4fbc119c5c8514e3587fdfa01f205866","sha1":"a396d7f127ee203b471f1a7e507184318e74163d","sha256":"10279aa2fbd66a0c0140d4b4cf9a39b0c9bd14b18bb35f1bd6eb26eab355b9d9","sha512":"9eef97111b2474b705b496860ecd29c7c591ddcb79887d755e5ea7bcf2d578a68bbecdc54ce4f11954f679ff2b8b5cf060da8cd4287a78a1fc3a92fdfc6125b7","ssdeep":"","tlshash":"cdd0a73aec10da7073a0c413c18067801140e514d644485c9cddea5a93dd7891180b67","first_seen":"2025-12-24T22:39:16.192168Z","last_seen":"2026-04-21T21:26:35.57678Z","times_seen":45,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/DataspotTracking-iQyfe7l_.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/DataspotTracking-iQyfe7l_.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:11 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1fe6\"\r\nage: 2668\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=6jpwpT3dRxqmsX5POaOUP0g43WHg7Bb1kmoiyMhKm60-1774113939.5882416-1.0.1.1-Y_vox3Lku9fSoQH2N5he4WmJV9zpsyfR1nCbKyMleJ.A014Z0PMo9FhzdegQockpYuUhsvqXWsFK9cxHCidiafraJdBxaj4Aa0yJ1pf4kif6Ndrg8Ti5cxwaEm9Ndwq0; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2z4Xi5uMmFh8My0lRgTh5zvAi59XcdXLrV4T7ec1UpwNoKIeqfNDD0bNz5VmRNcXptC380h8fMTX%2Bc2mZ541L8Mpiyho%2BJ91%2B3ndea1c6N70arU%3D\"}]}\r\ncf-ray: 9dfea838ca359cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":8166,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8165)","md5":"f1553761c57f3fe8977e11f9a5acbcb2","sha1":"0428d0e7de8fd59cd72a53c25c6d1646dbbbcd2d","sha256":"14ee5210761d6fceb87796096a7b97d4bf6dc77c671b081746ccd47d6b96c94b","sha512":"d31f722b3000e1fa4286ab76fd77cc4d84cce25893da33e8315bb220f0ba8103120a06a6577becd1654cf17895d99a128a4fd6fc3b4161f0a1ab8dd37dd4a805","ssdeep":"192:cEwDqXQcaXE/ucCOi1Kb0cHHnBxCHenNvuvXvqvxuhqVeDt8VZuS:TAqXQcaXE/QAxCHen5Q/0gh8k8juS","tlshash":"1bf1f455641e68bc7033c6ad0d5721a248387051e2329de076aacf5a9e3d9c28ff77cb","first_seen":"2026-03-21T17:26:39.500998Z","last_seen":"2026-03-22T00:40:17.814005Z","times_seen":4,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/index-BgO3MW-h.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/index-BgO3MW-h.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:11 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-173c\"\r\nage: 2667\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=jUVMUdgSP9wSHEeElw7o2lWfJ_mllC4BGb19LM3jtc4-1774113939.624327-1.0.1.1-jzv_g3ad5cvpdoj6PJpu7kwuJqwk6VHBVqrW_spdQyJlUrQyt_srYEedsDe9QUeoBsD1FH3ZfwjDbbtkuASJDJeuAXjX3yO8P1e53ucIMIlaxFybs2Oq7eFvLrUwTSXQ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P6kLkniLO9doRCS%2BQogH5y%2BFplDEhIQ%2BUNt1Hawlu9tqJJ3QbuNnoGX97h%2FjGAaxVW%2Bk9fgkvJdYtf0dr7a9uRotevnUtzq9L5%2FzSoyCce4hBUg%3D\"}]}\r\ncf-ray: 9dfea838ca399cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5948,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3085)","md5":"21a327b0619c3c1a324057951bbd14ab","sha1":"4f00a495a58ee62d19e6b5849989cc5618177634","sha256":"f69a26ae2b8c112785730a553e7f2b7d2b41ae889627f26f0b866746c536b6d6","sha512":"b0b3795759a6c3180fd9e4fa453572caf9644e0f2dcb10b11f1b5e526ad304a6fe0011fbf80296459ff6e8c516f52aecfad1f5ef58be025985b6c9c261bc7841","ssdeep":"96:q1SCtCFVeh7FHpokS73s9lsv2InwLRiTvHUgAaQKFr0FdWpA6u6PEDdxrOq+IHWE:R+ljijHvH0FdIuSEDdxP+Vj8Eu","tlshash":"16c1a65631907530c6d244a6914f42aeee3e7638f00f50a0b23f9c6d3ba1525daa3ebd","first_seen":"2026-03-21T17:26:39.40142Z","last_seen":"2026-03-22T00:40:17.987168Z","times_seen":4,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/TabItem-biu5pdkE.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/TabItem-biu5pdkE.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:27 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-19d\"\r\nage: 2653\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=6Rv.dOBCZomF1giXw9wVHwMTL9y4.AJcAhA.Gln5Cec-1774113940.8521767-1.0.1.1-yfygLP5LSpY2nQNxDwtFsBPMwm5H2gotNmvfJVRI3zvzoh2.rgdfjKgql.hxmAuYcu4bDTfVXm5JSixBu8XQWS33mxg6KeoZORhOlSfX5Re5fmykbQ.2CoGEMEZoJeOz; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psG%2BG%2BUulfGiOTAYg0h6%2BWmBoMAbSjhdaumpbenjpdTcxtsHAOXn9MEvueXDq6zWIRW6xh2jdK1zZkqr%2BHuXUv45eVpkRpMqBXkMngLmBBzf9LM%3D\"}]}\r\ncf-ray: 9dfea840bc139cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":413,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (412)","md5":"e572f7147d80a282b702909de3e002fb","sha1":"0c64bdba98c648a7f33e629de97d0fa6a3d04608","sha256":"4f0aee67a47ed48c4eee0cdba6b7f30408ff84fbb5023e85b2ed8963ca4a458e","sha512":"0276a4ce85222bc1c92cfe0ee96591fff70ff13f56fd7fab3d0607066f8b0ed98cafd146bf4f05d575c08da4d1b3328578b0a65ceb3c45b365215a81aa713942","ssdeep":"","tlshash":"5ae02b42b020f3f5982b94d6d27f94c7322209dcda9588e6a0a22440072e561f74ff8e","first_seen":"2026-03-21T17:26:39.549871Z","last_seen":"2026-03-22T00:40:17.82563Z","times_seen":4,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/1417.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.463Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/e/s/0/1417.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/397.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/397.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1824\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Apr 2018 11:20:48 GMT\r\netag: \"9e30ff4c7d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 11:27:43 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 194277\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=BpBR9VZf.El8Gn1br_BezzOmbn5twpnc8lbrL_f94rg-1774113941.6071281-1.0.1.1-3gGFHOGBLRCWdU8QL4gEa6X6D_azK7F9readgRurHEjfKR9Ys92vgeYMAohCWK_20uf3W.xz9evUrTXMfW7CR2CXkpVKIeZ3VBS8DxRrxszo1aB9zecm0dcsGLmyHyRs; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WCQZ0W6NlP87ZwrL6JjB2wxjY8v9hQofixx0zKAy3NFn4sJQNnXQEbBrWrh1s%2FsE2SIvg2qr4nx%2F%2FsUH1GNJWEZwAlpgX4rbBJzKOVaOs8DXyQM4x4meYWVmHwc%3D\"}]}\r\ncf-ray: 9dfea847084f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1824,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"777348d6c88c0f9752d20313165bf7e3","sha1":"ec83db9126d3827e51a4a09e714562525618eaaf","sha256":"b33304692a78a1ca4b0591f7bc94dff978ec0f74bdd34a8b5825353a3875160c","sha512":"5487355868eab4280f747f9ce6c66f206df35f886c5a49bdb93ec55fb7799d84412cbda93e97e7aef6ac66932b7fefc5d1bf59d433744b1e31f9bbd17f558549","ssdeep":"","tlshash":"96311903626c6fdc8a096493d32a628760684af5c075bd28bc0c05457e3006ede7968b","first_seen":"2023-05-28T18:20:13Z","last_seen":"2026-04-18T09:18:55.878067Z","times_seen":325,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"6ac4b41bfa3079e73da08ba512cca2e3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 746362\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea82948be1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14213), with no line terminators","md5":"6ac4b41bfa3079e73da08ba512cca2e3","sha1":"28236a6e21a500f8eb1fc0804ed1553f4b7fdcae","sha256":"b6ca684b4ef298f79d931ea40f8c3b597bd7e8d892a21e7cfc756cb3215792eb","sha512":"8fc4f8a4242748771f8a9220744ad1a1b501fa381ccbea978dc7062afee4c8788f2ad79a74572020146ce13610abcdba43f005cc36a2a455eb2d6a226a689f24","ssdeep":"384:UJw/U5YK8Hx9KJsThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJsThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"9052c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","first_seen":"2026-02-19T03:13:10.683375Z","last_seen":"2026-04-15T01:21:42.644883Z","times_seen":7903,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FastTrackTracking-Dwszikk4.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/FastTrackTracking-Dwszikk4.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:12 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-52a\"\r\nage: 2666\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=6IoqNZ4Vs9A4B3hL1qyHoDquWKKax8i7zsrbMVLo86c-1774113939.6067762-1.0.1.1-OBdkC1BgHUkuNGZQ5LQBWkcd16owmyF6XitpdFgxCv8Fm1IpSVjxfQT3pN.5hnglbmJvkUe4vZPIdchZh8jEzinyy66pwcWH6m.v6PQ.yL1cVaqmfxLO0F9Vhf6jJqF.; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uOQOcBBCtMJ%2BqQxTNnol7ilyshMtVkx%2BKUQo0IR7uA26yxLtvpUIo5fyqVHdLr%2Bs2Cv9rGSTtpFmo1pAW%2B%2FkoIAXfescjGNGOA2CT6L%2BJWqJrqg%3D\"}]}\r\ncf-ray: 9dfea838da439cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1321)","md5":"af41c045995fcfb27926ad6c22ae3283","sha1":"da167a71a31cd4d9b19e13d37095544f149ec6fd","sha256":"81450ecc7999e92453a3446ee6b61a01893fa5e85735a4ee749d9f9cf0c33bbb","sha512":"86af573598eefb92f27bf94d1c58424af046dd8ab98fc108284ccbecbb76bd74555dfeecb9148d10e40dcdfa1fbe53c6f0255669964d7a2d353fdb9bd08cee2c","ssdeep":"","tlshash":"c321750f90e443b47c804e8da3e7a261953d5871711ec4e1f0760bad3f0ca6583dac9b","first_seen":"2026-03-21T17:26:39.373556Z","last_seen":"2026-03-22T00:40:18.035421Z","times_seen":4,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/FeaturedGames.BqGfbibX.css","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/FeaturedGames.BqGfbibX.css HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/tr/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=5539E4i6k4_NTCk4iheOa1qXBe6Lh2mxO8ecgm9htiY-1774113939.9210742-1.0.1.1-O6BerkfBALpRWvSLlkjC8NkvZahXEeywKvEf5SqA2451qnT0anzeStDbDIFiR64iCrSF8G6Y03dRT1ujq0NTKRr2B2xIv9bSr98qx1wyPExlUVLrBbKd5egJAuiO1dOG; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nexpires: Sat, 21 Mar 2026 17:41:06 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkKj8k7rY47BQRQsxwUYmhWzeDa%2Bg%2B354VYIbv1AtxK6PjjS7U4bg%2B5jqG%2B4SO%2Fi6fVWHNxt%2FeGtMUgthPAHNj9L8rA9iGdcp0VBRbN%2BfzirPLQ%3D\"}]}\r\nage: 2673\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-1baa\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83adadf9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7082,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7081)","md5":"b9d344659eda7f84d59b2ca785922590","sha1":"5276c97b70f3ac831be147bd9d3184eb8532a2dc","sha256":"e89b502316316e94643e2b764cf5688400f9359a0dce35ddb32f4d1b6025e20c","sha512":"56e9d6058b85b8fd878993b2ee6e6ed7f5acfe624e013631471f889e36f34543c3ec77987f452bd46ec2e5c5d93266f4e01a5f80662867760c46463fe4c7235d","ssdeep":"192:TYFnOFceEDvCElpcFpgZFcV3r90CCkPaifKLwp2xA:sFnOFceGrcFp+FcVRWg","tlshash":"cee13115710e3a387a23a1ff26905b8ef4dac0f1de2a2d3ea490272bcad63560535d58","first_seen":"2026-01-23T19:25:36.430155Z","last_seen":"2026-04-21T21:26:35.568598Z","times_seen":347,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galebet1065.com/api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDmXUD7FWg9DF400TcESkIV5jEQq6kvCGAwL1Brq%2BLGtL6HAmhamA20ca3R5GTuWLMWeK2ZHY9iECOP14MWcYCM4AhwSwoOk%2BDo%2B1qRc8TjrCNkIkiU%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Jmggyafgxl3vCgbteFGArPEc44E8tEyz3eEOc57BFgc-1774113940.079446-1.0.1.1-ENRR1nCD3rmEWqjDb7o5s.qkw07KV7d_gwThgwEg_cJhbmo.wRJxNjlU0ciH8zR29VxWbU1_ocq42cLIcZSP.QhJYw4yquniMogLXSG10fTZ99HHxT6NYoK2Ew9KObfz; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9dfea83b4d9911c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13501,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (13396), with no line terminators","md5":"be249b13968555c655ab2a9113014822","sha1":"306a291c0eecd20d1bae212525410503388b146d","sha256":"780ee1c4f2c37dfa77e054b5905853d00d2659ac0226b8e05318adf97ec8147e","sha512":"119cc1636cbfaf93f328a5ece49925583674b245799c96f4971b86d917bd2e750f455540d3e503684358628437056b995091e7d67937205cf6571ccbdfe87a3f","ssdeep":"384:Jca8gLSD59WMwmT5llupt8IvfvEMaLpsUi75QpaZtRRus5Cr3A/0QqiXoV7vp+dE:qTCS9EcHcj8UcD1t4S8dIQEw/x14FxuE","tlshash":"6452dd23b02dd9ba5b547b40b4c3384ac99e5446dc0e9a70dc494f8d92ea62ec6e33d7","first_seen":"2026-03-21T17:26:39.677541Z","last_seen":"2026-03-21T17:26:39.677541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"go-cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/397.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.501Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/e/s/0/397.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/401.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/401.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1425\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Apr 2018 11:33:24 GMT\r\netag: \"5532ebf9d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 11:27:43 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 194277\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=NSX0Wu_ebNZUL1yY5Qs2_Z3hNGQxSJNY8qzv5_2ID4c-1774113941.6072693-1.0.1.1-Q6cQw7EpzNhzqSrm.xEajDU.1gXNJAPLLXMMYkEhbvS7D_pD5F4CYdaPBOGVEUnRZeu519siZ0W3obRSJZA6t1CtXvNtBapnTg1pxb9Rhnix25k5BmKvqjec_Z0Ppd2X; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzXI6lAcIh1qcIV79NtrqB11cIrugnUThzVyFLprNSujBFETRjyvGBNP1Us3%2B471CuyrVn7fRDeslKew37CC8p92NSbVaU4zc5gZyAh1veykdmowIegAtTF9o60%3D\"}]}\r\ncf-ray: 9dfea84708525a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8cc4e1601b8a75ae9d499e4a0e352b0f","sha1":"87031934720034de74987df9aea1bd94813efdf7","sha256":"c9533f86b377a63e9568d35b40836f86966d477596704315d90e2a07af2e5c7e","sha512":"6a28c9be4e0a3ef7e699b61356d58d39dabf3112c5eb210a38b892d784f4a5fafd77b19c194b394bdc3db5f25f65ecc778d667eeb4bace4576ad82ca1410b17e","ssdeep":"","tlshash":"72213ef1d456572fd79e90deb47f67e1f6cd751d000542da00496c45c4f6548044c512","first_seen":"2024-09-19T20:43:47.556193Z","last_seen":"2026-04-19T13:12:16.862921Z","times_seen":248,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":60,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:37.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 17 Mar 2026 06:53:01 GMT\r\nexpires: Wed, 17 Mar 2027 06:53:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 383556\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-03-27T18:26:18.3083Z","times_seen":12906,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":77,"dns":0,"connect":21,"send":0,"wait":22,"receive":90,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/AppSettingsButton-Z8Uar99K.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/AppSettingsButton-Z8Uar99K.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:10 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-181\"\r\nage: 2669\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=4qlcrwZ0piVI7ypI7OiifN2rfJsqjO4K9ZkYIclrkpU-1774113939.9366-1.0.1.1-AhAB8E8qldbwJFYPwjlIG0vtK6b1a2pcklMQEW8HJ2VIhGYxvWcTs3iVTG_vc4.XVBdVvJRnH.zDlh95cphvZXXUA16_Rx_4StlsHVaztel_QjbikyoYxeULl8wW81tt; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvToM8wCLBRYEdv1vG8erjZbNifqyiduvH1Fw%2BqlJ%2Fg9u%2FAU%2BjeOONZ80fm6LWtBn%2FoLVeC%2FKmhMT74d2yMh9K8zQhcbgHYnpYquqmKPznJzYzg%3D\"}]}\r\ncf-ray: 9dfea838fa549cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"89a30a627156dc5f5d2c27520b8dda1a","sha1":"7b42b5f3a628661504fb78adb51f204d573e286e","sha256":"622f3d41c1979a9d6e6856504b9bc1c5f1afeb02f3ca7c0299060843da6d581c","sha512":"46e969cd79931186b55227bfec7a5bf3eaa2f2a2538d294727796d70f30f17591ee2e676ef5695a2b5f163073d8124911f6257167d7c1c16baa75bc2e666e921","ssdeep":"","tlshash":"f5e0c08b91c2d2fb07d27ed1c11fc50179267c38d788d94140bc649176f02c6d14ea6f","first_seen":"2026-03-21T17:26:39.599828Z","last_seen":"2026-03-22T00:40:17.805928Z","times_seen":4,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.galebet1065.com/storage/medias/galabet10/media_751_d9ae3c894307358d99e0d666e91a8018.png","fqdn":"cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_d9ae3c894307358d99e0d666e91a8018.png HTTP/1.1\r\nHost: cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 3192\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 23 Aug 2023 05:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"64e59bcf-c78\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 9725\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=ho2HB.OE7Lv6rYHfvk7eVpsu8gnXveja7EQJewnhInU-1774113939.9102283-1.0.1.1-eqzRsPqPbTAnOrwGtJ6R2CzGtiadFw5D1uu3hyJeEPAvG6I5vi0LJoE3FgrcKwEPxO3el.1Z0Js4Y7BWPF0zZuf42xaUa4R8AzPMHYRGw4seq3mpyjJi2y1XYb6c3tKD; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uv5ZLUE9FCuzDsQyegM87kX6zSOsXEeObPWF2oT8z0k8UG9LpGD%2B%2FCdP%2BKrKeTPFUH4OxtiUP%2BncY1%2FdNZuXHrJc3d2%2FHuGa%2Bu9qX2LaWw1nyTE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea839aa7c9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3192,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7abcec36faa73c3c894b361fd966fcf6","sha1":"46f3c98f019e59da6263dc8278edd18eeb5e36eb","sha256":"1084b9e09a8774b738e99814bf9869be91b3c154d88bde64c9eac5e399153b19","sha512":"bbe0c85875f870eafc2ecc05b3c21d5a8c0022f1fe92224e65d3fb3f11d68f5793947b810d00c612361e96bd113a510f2329aab9437de415f5be3e1551800cb0","ssdeep":"","tlshash":"ca616df43548b234e081f076129690e50436be4e219eee17b597737cbf2515cd0c7149","first_seen":"2025-12-24T22:39:16.116509Z","last_seen":"2026-04-21T21:26:35.689412Z","times_seen":34,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/Odometer.Dtmtuu8d.css","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/Odometer.Dtmtuu8d.css HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/tr/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=g0RTZR.TnpG5_hxKtpEi5ONKsOFnZh8M74gc3UhnEYA-1774113940.027292-1.0.1.1-dES2QvzTdCCEKdwplhqpHNUi62Kb9dsuqD2f7zRMUUBE65NzimpIm1tpdEAefmAy4GZXqaJMcHTyu7CPcdeyo5BefFu2SNBgFzUQR3mq300X9v1jjOtotGJ8au5pcXZH; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nexpires: Sat, 21 Mar 2026 17:41:05 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkoDbQ8E4NBO6XNtzqLoKGeHSjy6EwQEEpVDji%2F1ZIhaC7ghbnAdhikUpMkibaHpy5z9HSK8hf45crlc0g3k4WIEHR3MIVJZBv2XhoEXLp%2FAiFg%3D\"}]}\r\nage: 2674\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-ac6\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83adadb9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2757)","md5":"e60bd0b6b84d162ff84ef731b11ed036","sha1":"09af532026627df2629f1a98a049ee8c50194631","sha256":"8d2a9d2617a60055e91c6b16f4cabd14851836edec7bf90fc8760e1d31a39df3","sha512":"a85638b5f89d49c50da5f9dc0cfaceec033c45f524a51bbf266fe9cf67f9ce63ef157745964b9ab7c1811f8e2f2d2c5d6348efebe6818d6fa5beb8291e36c725","ssdeep":"","tlshash":"2451e1154f910364633a7906b5c81b51bfece5415223c58e7329a447cf83db9e398e1b","first_seen":"2025-05-18T15:21:59.195484Z","last_seen":"2026-04-21T21:26:35.592534Z","times_seen":189,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"dataspot-wss.galebet1065.com/socket.io/?partnerId=29\u0026EIO=4\u0026transport=websocket","fqdn":"dataspot-wss.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:42.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /socket.io/?partnerId=29\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dataspot-wss.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://galebet1065.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: JiaP9fNN+uM7CkSZTxwRaw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D; _ga_MCEY36CK22=GS2.1.s1774113941$o1$g0$t1774113941$j60$l0$h0; _ga=GA1.1.1652025929.1774113942\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 21 Mar 2026 17:25:42 GMT\r\nConnection: upgrade\r\nSet-Cookie: io_affinity=1774113943.763.54.568208|a4492465e2c0cb857f789e83929ab8bd; Path=/socket.io; HttpOnly\n__cf_bm=NwpDDVwVrfgGkv1U42lMCUiqmc0MG9.2jX74oqEfhb8-1774113942-1.0.1.1-hUBfGvdJ8WZmwpIRRt382UE6G4Om6ZBE7jzxy4pN8rCEaRncxZtHMYBfConXsRcd8jHJYx613qQ9iXZstLJrOoAAgO5FvMaHxAIriq4ZVKA; path=/; expires=Sat, 21-Mar-26 17:55:42 GMT; domain=.galabet1060.com; HttpOnly; Secure; SameSite=None\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: /ZiTdKWfF0tLukHLWP+eGDoaN70=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=usMz1GNF1YXCceJk0jpFTYvASKR3RsLT7li5k5CZaCz%2BvbbNd0xkIVUFV2lLcYkJGx%2B17Y6uZWIGKiQjry7CwimFHUlyuAAn5jJmjqRk5kxeecakIlW0j4S82p2%2FqGegBQyb7wkGsnNv2EyaR0%2FS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nServer: cloudflare\r\nCF-RAY: 9dfea84b7ea7c8c4-ARN\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=80132\u0026min_rtt=80124\u0026rtt_var=30063\u0026sent=4\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=2835\u0026recv_bytes=1716\u0026delivery_rate=35515\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=06e7cebb735503c9\u0026ts=193\u0026x=0\", cfL4;desc=\"?proto=TCP\u0026rtt=7616\u0026min_rtt=7574\u0026rtt_var=2207\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2431\u0026recv_bytes=1729\u0026delivery_rate=370616\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=017f8378a9e75f44\u0026ts=601\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":590,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"dataspot-wss.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dataspot-wss.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_fec0ce3fb838228909c143d4c2cd0907.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:45.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_fec0ce3fb838228909c143d4c2cd0907.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D; _ga_MCEY36CK22=GS2.1.s1774113941$o1$g0$t1774113941$j60$l0$h0; _ga=GA1.1.1652025929.1774113942; _ga_2CT6DSEQTF=GS2.1.s1774113943$o1$g1$t1774113943$j60$l0$h0; ajs_anonymous_id=70f5bf9d-8e3b-4eb9-ab64-c8f626701651\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49090\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 23 Nov 2024 09:10:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67419bf4-bfc2\"\r\nexpires: Sat, 28 Mar 2026 14:33:10 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 10355\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=MRPpg3CCd6VJmekWshrjLnM..saNI1tsfzVvskxOKAQ-1774113945.9594157-1.0.1.1-D.G8C9zrpaI6OGX3pIragde5pzpJVGkxf0GyyZgiD6VvFqy2abXq1BWVbyyO0NHpd278PnSet1hQ.TlQAavKsKDKZRklNsvR61xlnq.QyrhY0nUzcIsB0TQWGzlmbPMu; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yk%2BfH0siCkRfaviOguF%2FCwQxGSTpSoTb3nikqzF82qKypuzitACX4i7gII2q3X%2BDVdgA7m%2BzSTMkoj4Q6VcNnGKk3NlECnZjBtHAs2XcoIeyJ1JoDg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea860cc8a9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":49090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"554a6a60b6ffca448ba10b49245ef022","sha1":"ba0918260a1d0c6637a1aacbceb9e00ae51426f4","sha256":"072b206ca7103452a85057bb9b4e7cef928ab648bca6458ac244f8ef86be5d9b","sha512":"79847851f93587d1aea114fc35dbd63b6b3882e932bb5469240f4fc2f28a01a866e883ad3440cd0ea3c641210821304a34031889973a3c0d3d75df70982baef7","ssdeep":"768:F093GeFzB7B+3nq/0hWz3f2O8euie3REnwUuaXPdTBvETOP2x1RkILzP+81dzNI1:F0NjFzeachqJleBEwUTETOux1KQ28dZ2","tlshash":"e9230233c0f23a3c236f235e6f4f4be42998a54ec7a79158a8428737631f0944f995da","first_seen":"2026-02-24T14:23:51.345694Z","last_seen":"2026-04-21T21:26:35.563016Z","times_seen":29,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/___vite-browser-external_commonjs-proxy-BvjNEVMe.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-BvjNEVMe.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:37 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-b2\"\r\nage: 179\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=12TJiMPIekG3S8pVDjeqs5ea_xJJcH5HUyFzyuvsDNY-1774113936.7715662-1.0.1.1-wlVkpSBnD1sLBsKDFfppOxtGNV1Ih.3UVclFTSDrqIwszfG1DTv97kzd6ZavKSq3vJfi5UaLsrydFuL3yAgJyBfrq5adUR6ciX9RlqUxXj3PJ5JT3IP03G.u.YaidHIA; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAIry0sQd1RFK%2FN0YyI0gHXXXCDBZOZQWRJ8UvZqJr4ubhzO8xnEE02pIVD4P5xaHM6I5i6eRZdSlMVkGiHTYutns%2F2jpTJrj7PlrCosxULKmDI%3D\"}]}\r\ncf-ray: 9dfea826ef479cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":178,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"0453c525f1f5a151cf277c20b691a2fa","sha1":"a708a4aacf7fd35cb4a8e0123fb8f1a61c37e8d2","sha256":"c59d3f5325da91eea5c987c2e77a946acf12669640c1d2de58a18d9704fb914f","sha512":"fbbe4db43256f047f5b6ee830b42799cad28672ed2b6966ae31f586386e67e4e13ff6c003dc1778ab408edd0f562e5dd3670a5a296cd7136061447180425afb6","ssdeep":"","tlshash":"dfc080491694dcb0525b1d828615d402d55c4d6e73f8f5d0bb088d51020158b62b8f9f","first_seen":"2026-03-21T17:26:39.615425Z","last_seen":"2026-03-22T00:40:18.04969Z","times_seen":4,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/bookingBet-C2_396gf.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/bookingBet-C2_396gf.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:11 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-ed4\"\r\nage: 2668\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=CxcV5GGn4OZtrNizyfAfBZYFnF9AHz8wNaDqiCAem8E-1774113939.5878713-1.0.1.1-Qxj5uWgv519iD7SY7sYrLI7zXPw2juQ1XzSsIeORPknZsXIskOioaFlVaWcJ7.0ASpJZ1mfjgqsSizXgGe3O6OU9XKPdMC4yVPQrBziiZ7g3rqdGfJx3npyIv7x7SnNV; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2B1oe5k%2FsEVPODNtB3OzB5d1aK9fOZZRE8ldmhHvj01AZgAq7c2vMnqA%2FT%2BD1vCE4VFBCSBYuNFFqndJtzETCx%2FWhTvmSRSy1uk%2BQn2xNjZfmPg%3D\"}]}\r\ncf-ray: 9dfea838ca349cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3796,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (3795)","md5":"382e197b84b36c2e881c5ad55ba49ffa","sha1":"f53385f540d98c26b3acd7bfe2a714778a3cfad2","sha256":"f49f90a92b84092e924250b9ba4c6d9ba49f9e1a5b7cef9c2cbf1ab9267eebd1","sha512":"ebd00bf5073c899966d24da20876fdd2296b624901691607e3e3d5dd0dd682ea0d751500286ec765da9763dc4a150be86735c8d08548888228cd3f7cb648bce2","ssdeep":"","tlshash":"2271e664fd30907e67f2317df4de7b426b2c4ba871a19a40fb6b5d0841848cbb534638","first_seen":"2026-03-21T17:26:39.649126Z","last_seen":"2026-03-22T00:40:18.176308Z","times_seen":4,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/DisabledMarketEvent-CPPtnhoy.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/DisabledMarketEvent-CPPtnhoy.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-a9d\"\r\nage: 2656\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=TWFtbjK1GnKgXOKodEaxgmBtJ4z_Z3yn90lnrX2Z6lc-1774113939.9854264-1.0.1.1-1rpzM_7FfqEua9cai8UaTwN4FRnKm7ZVJZ6yw6hPdgv849pejuccm.tgi63K.0r460sDAjkz7gEwUJEjyRL_i2dnl8WXPpgv0JqpW81Sy1rMSyBKkTYd30m.d4N3DlKP; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEKk9WDjQY36mSlLAz1qqvvJDdcDxffV2nryk%2F3GQZ3auS736oG17ILxn965OD9yRPLoXtK%2BFwJ3WOJFe30aPWEkONbOc0HyBTda9CbFqvwUYFw%3D\"}]}\r\ncf-ray: 9dfea83b0afb9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2717,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2716)","md5":"1ae7d8c222219b66a065ab6cd12346b5","sha1":"cd4e545ab58eea2dfb81e019db83b0c38aa163b1","sha256":"91e1c015e24443ecc166b3c80d23084b7202fc955efb7babbd75894b28316f08","sha512":"ce552e1c0f5315387462390ae80e21eb8ac37a8f52c4ccfc4db8b5a9ba3cc9f9b59c4582f2bd40031f7e198335795efef3aae2da13ca499359d5447a527b322d","ssdeep":"","tlshash":"cb51846df290fa7d993a04dcd23b1f1f601913e2c6590992d0be8c29151c0ee326efda","first_seen":"2026-03-21T17:26:39.419582Z","last_seen":"2026-03-22T00:40:18.068229Z","times_seen":4,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galebet1065.com/api/public/v1/tur/casino/partners/751/platforms/0/games?limit=12","fqdn":"go-cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /api/public/v1/tur/casino/partners/751/platforms/0/games?limit=12 HTTP/1.1\r\nHost: go-cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:43 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZ%2BXfQVTlM8%2BLK8UEmO4kboeXxrLa7a9k6aA0JGiNXnilj04XuthOq1KSqSNsYupSFlkiWbafpcsaeSFIprA86KLnw7PIaP8kbBSd8HX3q9WBZDq8po%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=39e43uUqbGS27XmZ16j1rtKvD.zQ1xxU3vzkf7RqgL0-1774113940.0411174-1.0.1.1-BxAcHv_B_8VZ.Z60T7KXqXKj3u7PTxicLePEhbgFre4DgFjKmawWfNxvmUE9mMbxRfgX3LYJ6q.J8L6yz8Iz.Y7OM.604sglvn8SGfaxoR6UEuGOzq.KDq8yKUU3iz_K; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:43 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9dfea83b4da011c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6421,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7fd95fcb9becd8e01cfba583059aac84","sha1":"8e4cd2d46697c30a7732d5d0c03599d78da9de8c","sha256":"87b5650ac6493f6c020cd797508844e6619b406328a661b18030c2856b2129d0","sha512":"aac63448641f11d2fded2e3fd6b1ed7657bd772174eacdec454419e589a51a4e73b2e8d8bd9e3fd682bf9a44dbc594e790421831b971f90b95a000ac84c9c6ea","ssdeep":"192:E4haShvPvxjZFCCyhMdoxhFvH55hU1BbPhwREFvoc7ihsshjqIjqL:NvB3xN0eK9oF7+95Ju","tlshash":"89d1de4e4924faefbb59094074533d0c98be57d26accbd20cd4add4a60e54e662332df","first_seen":"2026-03-21T17:26:39.685016Z","last_seen":"2026-03-22T00:40:18.184487Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"go-cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=galebet1065.com\u0026t=1774113939933","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.winwingames.io/","date":"2026-03-21T17:25:39.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=galebet1065.com\u0026t=1774113939933 HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bxmS66fJxS2Yg5MOGcxyxQGj9%2BRURuuahY28h%2BJbfhAqGQKCW%2BnqsaKUrFhneW83p6RCG648BNsjUJG7%2F%2BthlsBBMMO978atPWEYit%2Fudn6uJchd7io%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dfea83cae7276a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3112), with no line terminators","md5":"92e80acd778a61006c0de913088834f8","sha1":"90f81572d9661dd4efa3f19b3578fe025bffbb80","sha256":"037e29db2bf750693bdb5aba8c87f92a0d2492c934de4fb40d05c10952f5c05b","sha512":"cc6f733ef2b063057630ad89c51078a207d335af8ab052951a00e067ee7b3dd670dde49261f62c0a1aacf442bc62d214011943fe163a9cb27b5a953d77f7840b","ssdeep":"","tlshash":"3c5155b9ad99d1a9330a1763ad3521ccf97ec84f2a8b040f7a3d62c13407914da6ea35","first_seen":"2026-03-21T17:26:39.687415Z","last_seen":"2026-03-21T17:26:39.687415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_d74a4ebe29a311acd768d7a041714545.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_d74a4ebe29a311acd768d7a041714545.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30648\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 14:01:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694014ad-77b8\"\r\nexpires: Sat, 28 Mar 2026 14:43:42 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 9719\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=rPFNhGT14kovKlcbzbAEjiiHrB1xO0bi8SM6msNmbTY-1774113941.515121-1.0.1.1-UnE.bNEgcSZGKVxK08vAeoKtmwTqYMNo3N4GqlxQikuJyfqzvvWOefLc1G5mL3Szhri0izqD5.tVNItnSBWA8YxBVBlc_kKoRd9XQNjbhnLZWPQafEVeo30bKOn41qgQ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EQlRw8AVedblootB8ZoxVEoVCRxqAdRmcVNmKyRETv80T8Cd5Jq0pE9ZUwkbSMyxRwyZ%2FZn%2BkhbKWBXIDMhxx2nHXO82TwWGerIth70bPzPZxBZaOw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8450d3a9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e44c769c8b50867b3c5a5f351efe25c","sha1":"13946ee2cd8c9ff6b74ce804ffc950b06d3b096e","sha256":"ba8112aeb4f696d5320c61972a04ed6a623bcab169a49bf3e4c15309c1b8e013","sha512":"26c9ce08f0b8b8059777d5dd806b09613006bc84cedc0ff3ee4b8c01e3e1b07f3a5e06a698ba2674a46128901ae5dfff43ba656124bb8a6ce9b135d6008fb378","ssdeep":"768:wj3t8z10BKltBMdANvhvUsEDcb4f92KK4cduloRN1YfSh2+:wjY10oVymvU9Dcb4fkN1Yfy2+","tlshash":"0dd2f1f45e14f4d273822d3b6783643b64a7c0ff2e9b5db1279a007d9e36859540e28e","first_seen":"2025-12-24T22:39:16.17862Z","last_seen":"2026-04-21T21:26:35.728342Z","times_seen":40,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/463.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/463.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1215\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Sep 2019 06:20:21 GMT\r\netag: \"212f16fc1f6dd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sat, 18 Apr 2026 09:03:28 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 202933\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=vVeUJqVHNhvum6dnl70uUAokU4totn.dthswoeFyjQA-1774113941.6132636-1.0.1.1-uOcmjyBwW_t13FZmzj_CO95KKtj9i25jWm.hWhlCRNPD6MCT314qq_dluVUcNiEm.Cd06mdx0IiF8NUi44DOwKiydgQy_Mk8lROkLJxA95uduxwGYO4J83433VrQhESQ; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bHmzUlMUXYk4SL6GcxPCABiDxoVDp7kL15lzD9VgLeEJRlby3k%2BP6VKad8KS7Tagp0A6dtBcxJfEDnXJyJXhONy25rzfH%2F%2FcfiWHzWEAC0jZCDOl9MPEwdusfQ%3D\"}]}\r\ncf-ray: 9dfea847088e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c1b16501fbda8b3a4ff56043bb548b34","sha1":"8f444c5629dd947da52453fce945a6336d1448a7","sha256":"f8774ab1284ea6891d6156e1d8e62ca5689e9f604b59ef79bb47657e89e236dc","sha512":"ff430fadc875455b963f6338b9cf38f4972147f9c7ee11891f6b3552abee2c30177b7276c917702f1ae34390af3cf2f8bb4ee88d428e267716c7343e679a2972","ssdeep":"","tlshash":"0a21dabfccbdc5bbdead3aa457975b00bd793666910f231050f85650116426cc4d2e41","first_seen":"2023-11-25T15:41:35Z","last_seen":"2026-04-19T13:12:16.790148Z","times_seen":244,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/387.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/387.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1662\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Apr 2018 10:38:10 GMT\r\netag: \"e5225c581d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 17:25:41 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=JuRRsW2NoxOAutXrPYf8VVBxkBYZo6MlyR3gaUdRmaU-1774113941.6138194-1.0.1.1-M03qw915iaFm7ToBx106BfNFZPL8BGTMTcnVqpoUu0yxATgkSo3FGFaMcoIGHFLvLvp9yz52me7lGbvYiQrUF2RHAb8hmVv97g5QzfjzMAAHHtHb0RKICQpH1aiMul7j; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQaKVljQt9IqaQtXUsuwyb7mpMlRAdi3HBn8SegZGpLJNVQR%2FWK3WPXYn7plWLSNw%2BkCuko39cNbhr55g6Qpz9KUZhbTH%2FaMSIjUn8jD9HcS6n0aMzTnSF%2FjJO8%3D\"}]}\r\ncf-ray: 9dfea84708915a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b16f64e207e4368dede3fa6b06ff0e5c","sha1":"cc79b7af6a799d1c4dab98341c43a96638ae1588","sha256":"c28f5b69c14fa6cfd0ab8cd0cb5e5c6cfca7442268ad7c90e055104202987b61","sha512":"25f8724eb3ed32e6fa01a80126d735644e7c9c447aa30e69e0c43e877108349abcea5b47e5df524bab0f597fda0d6206bfc256ecf563e2c195c6b196f9924043","ssdeep":"","tlshash":"ec313c981f2d28bdb7c08d2289704853b4fb57d55dc33744273dd244ec886b97179790","first_seen":"2023-11-04T19:13:32Z","last_seen":"2026-04-19T13:12:16.729558Z","times_seen":468,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/payments.json?v=03/19/2026-17:16","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /payments.json?v=03/19/2026-17:16 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:35 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:25:34 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-e0b8\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=YTDEEFVX5w22XrYoK5GrhgFZ8DKk7jW5Eomc5_wYUVc-1774113934.9084423-1.0.1.1-yRKAD_228bmHd2s3HxbUl5qrZJnvnZVNjy5R8Bp7hnXozA9QB1PgEwkkw9X9L4xTJUqJ5QTuKCMEEVFc77LxVbnLkAVt_jCz_FfGT9vR4u_6ZbsecxK4QU6RK_8_ktTj; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PU66qK86TLajqm3A1gistqWxB12W0tSlpDxM95qNVodkh876BslwdlNZlFQM1oMKBx7dF%2Bmu3d2BVMpFyyqjUD59XMwZ9gqa2MdtOOQX43pNLno%3D\"}]}\r\ncf-ray: 9dfea81bed899cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":57528,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e7f4dfb8365d538e850233f2bc1241d","sha1":"023e0e49d553b587b3e23c8a19806b565e3c3c23","sha256":"417cc56cabad2d7cd36252c80c223b0b2dc324d3c416394e9318ef3fc5e19c66","sha512":"a0182e6ebb6b5a4e424c2991d8c5ae99659810b82cb62964dc508eb32d1c5abe24549fb2f6f962c1667ea831309971ba2ed4d1106dd7d32775e2b8e17e517780","ssdeep":"384:UCAv9Q5iPDFhmDbX+rN4PUb9TDzKHbIe6JxE3VQF6Vc6JhWB6J38OA16DKkCEFKu:q9J4JpLr9AN6v","tlshash":"b24361c4241b8cfe4fd573c075ffd10b719a62068aecea89d1a9ce350bc9a1aaf41574","first_seen":"2026-03-21T17:26:39.69184Z","last_seen":"2026-03-22T00:40:18.173633Z","times_seen":4,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":475,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/CasinoGame-ltYKuqgq.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/CasinoGame-ltYKuqgq.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/AiPromotedGamesWidget-Byj5O19S.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:25 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-16ee\"\r\nage: 2655\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=rP0YhnEDDHJA3PuHhBHRM.XKZELQDX9JdhvWBskYXg8-1774113940.8541744-1.0.1.1-kTrHbXS1nQOHnqq6nZ9SQPeFisFZCKbV2CBqtj2rYAQu5TtYO8A6YsHZgP_FlygZmayP05pZHiExC2XiOKrYC7coQ2u9CdoFDrOlSXfxTMh_6RTdLR5M.GklRp2tvt6s; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6oAseU1TBoqszkbhpdEL54pLluzlSAPEI1Wng4DlmrzBBDJXvBmsFKmhqHxx4g8siYbWxXeozVqWKIrPSIaH4YiavRLMzHz7ZcoSWgYaPX%2B1OY%3D\"}]}\r\ncf-ray: 9dfea840cc1d9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5870,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5595)","md5":"9e451ef9a803c3f7b894af280148f56f","sha1":"8e10a59fadeecc945cd891c09f4b35cfcb109ed7","sha256":"ccfacd7e71cef622fd86d8549b91f69eef2eb67ba6604f9e7117a03d58a4e8a4","sha512":"4e025ccdc94278573d5a9df211da737ba379dbcee75021e6607a73f599fdcefe50af54c76174bdf4f6c0fb0ed1a66d3b4dfacc75d5f5854452e1b77d3a16e8b1","ssdeep":"96:jL/bVqh2iJMeVZhL+no0JzxF+zZZ9Losc3MM+xA5Z9gvWUwBVTCV+xRbK:v/xqhCex6rGFssc3MFxABtCV+xRbK","tlshash":"b7c1b445e024ebbeb83a08d9982f102574192fe5de198076f4bda839323c15d7627bde","first_seen":"2026-03-21T17:26:39.386441Z","last_seen":"2026-03-22T00:40:17.789882Z","times_seen":4,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/JackpotMania.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/JackpotMania.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:10:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=UZyGrgRVlCW5WPzftN10H1GllEC132nkW7jHL8km3CU-1774113939.7027497-1.0.1.1-vVHQTg5Sxc78nN8f4jJDqBZGUn6yhef9.DxcGfGhWP1g90oyh0UFffKRjwotUUJqaBPoo1iXSgGuK1fmFNrVn8oL2XYjJAQLcDFeFnesL9QhbMprm7bUfcadh9VS9Rjb; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FW3Sxgrv3a7%2FwAAybzuJJmlyN%2B9N47ZkLOSh1JxqQyS%2Bd0fuPud7wkIsVMN7z59Ua9G9CA%2BWFSaz9s8IaPfXkxcmWqvKpDVNNjgPDdrMaWyIkAl5qA%3D%3D\"}]}\r\netag: W/\"686270a2-1796\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838f8f811c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6038,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"829680ca0f2f9d1f5faae192e8e40d75","sha1":"cb4c7ee7795a21eddbe36de36ff6c2e16e5f87cc","sha256":"05bca82b332ce5b8d3ab2c1e26331babd5f33d3ba924bf3e2b63b7fe44f8ed79","sha512":"173fad7120aeaf6cb2f7fb730a95b9af4587cb8804d09fd8a506e5eda8eeaa02d828a05e4c4e34bcc56f542e68abe6443792c891cfc8f2eebea59e21388b7a90","ssdeep":"96:NqjNrGLUu6fBaLQk9p0ZG7mi47U8/UA+5pRxq8uK/DUUt2TEojLdK7HiBe4I4erG:YprGYdqQkQE7mAQUv5p3q+DUU0Xqio3a","tlshash":"aec145fafb75a0f96ec753cadf223e3d79495d3d9e618794512e9a8907439c803018d0","first_seen":"2025-10-24T05:32:28.41634Z","last_seen":"2026-04-21T21:26:35.730505Z","times_seen":30,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":24,"connect":11,"send":0,"wait":529,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/css/fasttrack-crm-app.css?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/css/fasttrack-crm-app.css?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: zbjvR4XmwNBIJlxjEvxcm_sn.IUZfztx\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TXvPX7mNPXJsEnw5EhFLcNtI6DVJ8KsaBnxuqMtl%2BscTz%2FLK1iRuH%2FCLoWSFu47dqjZvM46il0DSaFcJY%2BSpt3EwNbMFQDLaq0z%2B%2B9xz6Eki3qDVOyYM7XzL8T7Xlg%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5e29eae3156522edc7886df59287259c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: z6P6oALf_e73ymAguwX9M2kQtNN_6eGjOWO3qu0GI5uy7FpRaMKD0g==\r\nage: 64\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"7906aada543698dba1005a917ffae2a7\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea8437c7445dd-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27953), with no line terminators","md5":"7906aada543698dba1005a917ffae2a7","sha1":"7f00d6655894909587fe280ebf09bf57f66b4100","sha256":"5e2a69854668603fcd556f0b8a3da306e3de6d5ad4dee7a9e9a57ca998269d76","sha512":"262f19709cde3e7abb7bb6d9724437b042fe626636083b80376e35a91d1ea9b39aec82463626711cb60a8c516a1b909d53aac644f056e77929e736fed6d1706b","ssdeep":"384:cFukqharVUf5rKbHWkAB1MG4TmpcHyH3XHZw/XNPalHfI:ckkqharVUf5rKbHWkAB1MG4Tmpc+J6aO","tlshash":"78c2442302c02288ac2b892b73d50599d93ec836651b6dedd7433955c7cb77e3a6b34e","first_seen":"2025-10-24T22:03:16.572036Z","last_seen":"2026-04-21T21:26:35.749344Z","times_seen":100,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":32,"dns":1,"connect":8,"send":0,"wait":72,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/tr-vKvB_tcp.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:35.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/tr-vKvB_tcp.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:22:36 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-5b3\"\r\nage: 179\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=MpVH5pGBmWpmMg67dP5lNllvaMoOreuRS5_7HftquZA-1774113936.0323915-1.0.1.1-vHbdABrKh32PPeQVWdyzdlMGp0i2L_y2YGmuTNC8Lkk6..bKU2RzESJgU5zBKmTGV7TH6BWadYn9Yo_Cv4t.xUI6akLpNacIJXr_WtLeVFdycuZxsDwo8V8hZn39ZYIf; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJ8GnUnOseiWllvt9PtET6MlDHX33cwtAOpwizse781BaP7uIE09K9QbYt8j29HVeqM8xI552y7HdhwvBAfU1Z5Nbpkr2FkoEWgspQ29Sur84E8%3D\"}]}\r\ncf-ray: 9dfea8225ead9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438)","md5":"029e4708c52bb4fc1e7f00b3414d9537","sha1":"bb8e29f589a2f69f1a05f0388800ab447040e565","sha256":"07583a599196f96701dbae948953a539fe0b88fd9392d57e2dfa3466663d01ae","sha512":"4df8c5c71ab5f560a88a315c5b0983c2f6b968a7d32a6c0cfa9491c1a9e26496882296b475411c288734d01b03c8e7c70bf9a0ad11976bfefd11b20fb30fe3f3","ssdeep":"","tlshash":"1f31a44c2906eab28b016887882f5f04f81c2b087136f1719ba0c861ba709ed807eb3d","first_seen":"2026-03-21T17:26:39.379575Z","last_seen":"2026-03-22T00:40:18.189259Z","times_seen":4,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/useOpenLiveChat-BqpHSaBt.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/useOpenLiveChat-BqpHSaBt.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:16 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-247\"\r\nage: 2663\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=gHH_OeDv16Tgged6CUmNgu.i7SrFE3I8cJj5VatXieM-1774113939.6467686-1.0.1.1-E3O1BeMsLbDCuC5ragpsw0R7HR2fs80HmobtsW47sM7xcNI3olJw65olW8PVxWYlAtyCi4hMJnb4ZrTVUDVFnRRbaSmaoSWWfvI7MTtepZj5S6H..lr_unUuUjvE4W2Q; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hrvc5WBKl5vGH1sCz8Q67Rf7rWKRlYo9WM6hUrwlhhAdtIWakEXO7Q%2BXFI3DMEfp9pZuZJjBhyeyHvdmCosl7OO7O7rwY98RC0koSLP715w31f0%3D\"}]}\r\ncf-ray: 9dfea838da4c9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":583,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"681eb5126f2ec9c2aba7812d2e626840","sha1":"9ffe76ca1e901f691ac60faef61309d95902c760","sha256":"b4809c2e970036d0b7d9254d9d823fb9b020c888f18f71ed96f3c22224f9cb54","sha512":"b2dfefdd86cdd501c26c715bfd02b9f1a64a8145710d4acb1e91f57fa2fa4b0db743350947a0cefe3d5913be116aeb6c1758bd8f1cb54f07c8942c7fee79c554","ssdeep":"","tlshash":"0bf0e19e86544e7c81c0ced1516be5f85b3c2ab4300cd851a93b6cc8682484457bedab","first_seen":"2026-03-21T17:26:39.588879Z","last_seen":"2026-03-22T00:40:17.995274Z","times_seen":4,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/fonts/default/RobotoBold.woff2?v=159","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=159 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-f250\"\r\nexpires: Sat, 21 Mar 2026 17:41:04 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 2676\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=e8WQrGqqZQFES8FZHyfH61JxvB3zTFL.a1LEX87Rreg-1774113940.6323245-1.0.1.1-gdons0gKIMUX1QKATPdSRVjcj3uq1W9qplybDogZspv24Mw6SCImpJDs0luf0XycHtbxzkCQTeRGwflTjZHfLNCogFOn.dUsZLnxdpS8YCvSQAUPW0kw_R_Fz.0uRg_2; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3rx6i3WcGFjDKP%2FDPjabo6HsjSWJOWwZ1oX6K1d9RB63S%2F1hKXnQbdq0Al8epPydxFilWL4JADjwO0TEQ%2BiqicJHgXwJJLWcWqWrOOdtaT61Juk%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83fbbed9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-04-19T13:12:16.87074Z","times_seen":2567,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":363,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galebet1065.com/api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIQxwkJ7Mv5w97MHnonQePR7DAV%2Ftx5A4nI3TqUQUytIz44yemavMmzAHTx9Gu3gyDDtXzCCbypbTAT30G54HU%2FG8oSLAYO5k6UKnxjZ1tVNHnhc9o4%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=YEkX9LUUsWFfMlrkPQiOb4Qv0f3pzXlICM6F6mSrYUc-1774113940.922911-1.0.1.1-xGDFge7lCA8hTocreKCu.VaeCTA66igK6cSaEqcLG9lM0Ov15iwx7JAa4oFJL9UMbAZ78fhYo9XxFJ3.E3HsQG7mktalPpGKpnKz6ZgFp1wKSxaOWA5DoPZzjS8XKkJd; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8417c4f9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2615,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"57bcadb4fc8dd230f6f3adc9cfa648b7","sha1":"321770a05730c5f865b429f3fcc694ffc9fa5ec5","sha256":"1772e571c74fcc1ca93188d5e69f84c965c726a181a7b3d561755c315ef595b4","sha512":"cb9b859208257963cc58c460d277aae9b69d53bb7bfccc6a50c8d87c4bcc9500776b35e7f5268869b4ade92c59c96b39bb491046cd4ea1fab24db640d2e02027","ssdeep":"","tlshash":"f1518b13702d9d6a5b507b40b8c7394ac8ee2447dc0a5670ec494f8d82fa63ac6d33e7","first_seen":"2026-02-24T14:18:16.975259Z","last_seen":"2026-04-21T21:26:35.816266Z","times_seen":39,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"go-cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galebet1065.com/api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=0\u0026country=NO","fqdn":"go-cms.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=0\u0026country=NO HTTP/1.1\r\nHost: go-cms.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDEjFqdEVYJTEKq8SPMPG6J%2FTG3G%2B7pFKw06wUuLBg6DNGbpFwd4BgRxYnZjsFzjFXPekcaNBL9wIl5TFQOoOJqQTr9wHkvLE8tL%2ButpDl1BMzixIok%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=W283EcRRN8ZYHy1TpXgCFGuKG212OaSJstIizcFS3xU-1774113940.9238732-1.0.1.1-OcdQrowMJqa_7oytwIj7DCAEnpR9RKUsYNjobwxfuq2meOQwEVGJGL9m2Ghvb.cJ59myccIX6uivkWMGve59GCodJl9Gdu8ZmxrAuWW9cvSHnQlFPL7MXRwZcWhGYeJM; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8417c519cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2222,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ce3902f4bd7f8f07ef19311509e56859","sha1":"4f8dac69410d4feb2f28963976a11de31833bd47","sha256":"e95f8590f1b24eb82a9bcd46e69bae80f375da5a9d273d5111fb19ec40fce0ff","sha512":"ec76ed398930c6fdeee5bf27adfa17c668ef4d344e8ceb01367f6f2251bc83502c04f7cc4d2cac53b3ffe176e1c0b850a266fc233aff454e7c5ec42b1480d1a7","ssdeep":"","tlshash":"c7415933b02c98a65b443b40b4c7394a94dd54c7dc0b8570dc899f8d86eb6298ad32d7","first_seen":"2026-02-24T14:23:51.361484Z","last_seen":"2026-04-21T21:26:35.67329Z","times_seen":32,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"go-cms.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"go-cms.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_aff4011d6c5525eac140c93daa9b705e.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_aff4011d6c5525eac140c93daa9b705e.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19502\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 01 Oct 2024 12:45:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66fbeef9-4c2e\"\r\nexpires: Sat, 28 Mar 2026 14:35:58 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 10183\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=IUe3rfWkTOmVfXC5nq7szdigscekwAtWccRtV5mKbLo-1774113941.5186405-1.0.1.1-SkTr0dKUx5VZe4dCXsb8JUstA6NeGykcHk1429TKhh25H5Yun9jCtA7kEz3Q2H7pONUqW0h.lrTcGU2kcahq5Ow33_x_jlAp2Fs02uT.9Kotehkz0QIfFxiBHWHSwpai; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vR7%2FwSHPUz9xHXeoiu2PzrtrhN9M0wJrhVNgDERy9U5u%2FUchspkoqJsf3A1d0YOvGRHT7lpuWbLIGYW8RLffardvrYIZARTid1ixCCH85h1YwbuL9A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8451d4a9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":19502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb8a2fce829b77a41898f77b8044a7d7","sha1":"ec930f3ad570b2b82de7435f403294373b9e08c8","sha256":"eff975d202b8198412f6fc60d2a9d0debe36d1ea2a413caba2b3ff0fa2146327","sha512":"b4021d2ee5657abe95d0115e5695c124cd500d20ab1d331c64ac4a416de874bf3cf83e9d79c50d133c843df31a1c2dd39a2188256f920ec027bde67a051a05ca","ssdeep":"384:jTMW+QrwvaBEDdPExxNOAZA2MSjnzJAkp+4avBq59InjItQua/ctq:sW+QrwvaBYPE3WNszJt8TBznfB0tq","tlshash":"d492d0f2949f7a4a5b93ef328c38c2011faf335d0b64448461c1f69544b495a4e6f9eb","first_seen":"2025-12-24T22:39:16.161133Z","last_seen":"2026-04-21T21:26:35.680449Z","times_seen":34,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"7c8224daff490314bbee102edaf64029\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 746366\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea82a28d31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7c8224daff490314bbee102edaf64029","sha1":"13aabbb4f10305443e0fbb19c55fd27c149828a6","sha256":"a3652c70ae4477871298cf7fec970ce38a1a5f26a814c06b72cbbafa9c6f3298","sha512":"4a1ac844d0cfc147baefde211336f72422efaaa9c92b4e3a150e434aa3bcd0ca3ab49c34aefca46bed94139738c01ec1af989beb50b48dc747faef0cb8a779b0","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBCrikauV3cGiH27PNWE98MGfU0nPROpmi0U:xauVLmi0V0d+tKaK","tlshash":"dda399b2e56710cc7363c22692c1faac1029e370c757caa6f827767d4bc25963562f9c","first_seen":"2026-01-16T00:46:03.978063Z","last_seen":"2026-04-22T00:02:58.116637Z","times_seen":22123,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/GameSuggestedEventsWidget.B3VqF5zK.css","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget.B3VqF5zK.css HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: text/css\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:03 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1ee\"\r\nage: 2675\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=.DMIeV0m1IeXCGXNR44P94HKaTdBK2UjBcskIV463Lw-1774113939.4523478-1.0.1.1-DkxMvqoeuDJLnuaMmJGw12bP6QGPoR6qrtLcgvbEJaGDkF1iCMj61sPvvM5JXPq2puYnbxcK__6f8IDOfxwES.NhQIIP.HzEYbFo4jjfpgY_7Nb2D93p1PWzt_GgcYMh; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqLbs3DbwjwlUlMuC2engKHt5o%2BfGTMgH%2FKEKnIC2afpQoMGI466tWOrex4%2Fh%2BxZ9d0JAKDdFYht77f67a41iuGfsUiOz5v93pQrY%2FSFSLVGS30%3D\"}]}\r\ncf-ray: 9dfea837ea109cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":494,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (493)","md5":"3d3f0fe9e1a11530bcc5b93d9a483aa6","sha1":"5f6ec492c5fdf825ded4910f380466bb23a50332","sha256":"bee73c23ba614c70cddd4a90715357b4e5247e83db72e74289f80e59f6349fc9","sha512":"3fe221c3be766eda2e1f32ce4d86509e3766421cde94b5098cce1e9a4dd253c550901190f197e517d10e96322ac66e357e727e78382480d92bad2d1efd53d670","ssdeep":"","tlshash":"a0f0e9218f34ed35a4ac03ed2a77005a5760e195bc5039f86fe1bf158a087e61ce82cf","first_seen":"2025-08-13T22:32:23.57413Z","last_seen":"2026-04-03T20:43:44.639914Z","times_seen":40,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/BetslipButton-CNMBkbkj.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/BetslipButton-CNMBkbkj.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:10 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1a2\"\r\nage: 2669\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=1pD9F5CPKffJSpRwrtZQnaCHvKbr2gKvOy8VGG5nDKA-1774113940.0483854-1.0.1.1-.Qg7X9hgt9AbtXpMbCn9pI78s1d.0MYI83Xqk2bTFQ6xR5fQRoogyy81oMplEELZ3CMm24kanwHf5yRxgLk7I0Gn_r16ziXvwykvWRKauYH0eJCnCn2oOe35b4Afv_Dv; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tdw9zQsp0cK7rafuGnQjoc3BytvaIyZzexdCMetFz1EUn9SW7M3f8lqWO%2FZbTcHfweOZMukqPmKrEi8UY9YWwyGN4zsl%2BwwRXsyXA26%2BAf1359I%3D\"}]}\r\ncf-ray: 9dfea838fa569cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":418,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (417)","md5":"249176655ccc714dff62a32ca7344125","sha1":"b2405b4b60d6bc4ac573b2f02a73ccf50fb95d6f","sha256":"55fbe0abfc99ec5c3486183b6cccac4ee249dce7d36664b5fc8cee69ecef62ea","sha512":"29545a89b954d8bd838e455af8c8ff502c6cdcee4283698ee957784188664cb775b081edf08664d5fe201a8db623035e744a105952a58a07402ea03407da783a","ssdeep":"","tlshash":"40e0f1468948c2fe07465dc121078502343269bcb340e5d280a92c527fb4689c45fa6f","first_seen":"2026-03-21T17:26:39.706598Z","last_seen":"2026-03-22T00:40:17.78654Z","times_seen":4,"resource_available":true,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dfea840dc84b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441060,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"163b603e838354454c1e785154ddaa77","sha1":"cef425955b1e8acec587fca01910201dfc29b100","sha256":"4c23e96b95c2a2f415c0bca4febeec378005b2853b75cad1fdc986de2aad323c","sha512":"40e42d8ed45c0405cad29997faffd4c9c165a60483ad66289d6d44c26d0fbf3fb0e707c2240df2d02fd806cced7ef9d96e52369c95694283670a0e18851b4dea","ssdeep":"3072:bnRMpaIBoZbVITZZYA5drAdZ7GlAMIDl3g4Wcmvu7IHkGOQkDWgkQ:LSrBGVIL74WHu7WOQVQ","tlshash":"749444bb8f848f5b1b280bc9212d3d6c999e298bcbc55df6f1c0cf1844f4ab92315566","first_seen":"2026-03-21T04:57:18.893098Z","last_seen":"2026-03-24T08:36:22.981001Z","times_seen":15,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":41,"dns":21,"connect":1,"send":0,"wait":77,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"09a6b2a4fc1400ec37c1115e6aa1670f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 731913\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea82948c01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53411)","md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-04-22T00:02:58.103121Z","times_seen":28313,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/Odometer-DagrzJgf.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/Odometer-DagrzJgf.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:19 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-3d08\"\r\nage: 2661\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=mLVmeN.ZttM0sFWhFniGbvKwPoe8s2vrUAVfThkGv.s-1774113940.8253894-1.0.1.1-QrhDLWeOAYr3_En93akuYxSvdtAMhZZKDv.yWaMI4re23vD7rudJMIvkvWNTwS9X6NtOLneLLkHsm.zGvW1xTHgaozNI5_VdZ6aadOGQnCxS64rl26ThRxlND8JrAgQh; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2fMbDoTYTvePY0By%2BDbe0xTB%2FFkxdskhzGq8IF%2BsKCmdJVgkTJe0xBsYKqXHeOF9EqhrbXGJ0XYhU6Kd3sSfZt6ithlf04lmSHntN7afcx1sW0%3D\"}]}\r\ncf-ray: 9dfea840cc179cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":15624,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15623)","md5":"8a74ad83f4d1efb621438d7021c4628a","sha1":"120a50a42082236b3e09009ec567650ef3fd9347","sha256":"dc82bb79f276cb80002d3acf0030ab12ab8708a6c49ccd3a6efa43f016a699e9","sha512":"6b1f7dc97e1051af90eb7b72e4c5858e98aa819f42e7fa46c45cd42eafa7f088d6bd156a5880dbbe207de909d54a5dc2090721f104153898bb4029ae8c05525c","ssdeep":"192:J9d7KNJtQak5S0CGvDF2pXokmkvm6HjI7kauLPH7BNeSYpkYxSBrC7TlFa4PBD:sVQak59CGbM1mem6HjLPyFtUhkNPt","tlshash":"43621a897922723443a3b1e055bf4609773e5d6a3808405db67caedabe32c09d12bff5","first_seen":"2026-03-21T17:26:39.710671Z","last_seen":"2026-03-22T00:40:17.816907Z","times_seen":4,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/CasinoJackpot-B9xPGuUB.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/CasinoJackpot-B9xPGuUB.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:19 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-3803\"\r\nage: 2661\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=gQKIiiLhHekVNtFMp6g.lqqDB.qkVIFYiGgAQolvvZA-1774113940.8285086-1.0.1.1-ViAzdyNHw3V7dnuo_CftiXBjPN27ACf.plY8HgTYnR_zuQbeOzcOru8MZtsdE3nibCUsLalRgS7GAPA0PmSWcs8EGkoU5b7lTJylo9yrPIDnJJrUn.89o4B4zdBrkLfp; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdatmqfH1aEOIK0W0tgMU6f894jJO1lkjDQnWSH4%2Btc8P%2FHN2brTGBbkKKEobUetXo49WBG8VxfIOpS6NFR2o%2FS8sM3uUQJelXEW7LOk2OvKckI%3D\"}]}\r\ncf-ray: 9dfea840cc1a9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":14339,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14338)","md5":"c681dd00011ca8f396b64d03b78c8d33","sha1":"984d629f7a1c2f7d57a81c77cfeeb02d6d851e53","sha256":"cc99cd3a07b804e7ce37254db7c6bebf70961a2a0284038437e5dedda04b7279","sha512":"0fddbf82b4c4250aaae9c53cc10ba58e7909eaed6003bf15e48780bee54835b67ff55a40cd92ff4cdcdd8d8ceb6e786ed4b3f85863ccc23d29b3a37a5b402742","ssdeep":"384:bm6srKqqF3EjFOFEGOpOpeHMtGRxeG/Pcy7x299pP8FJgr:bmB7CEGOpyts/U3Qgr","tlshash":"19525c05f012b7edbcad54f7887ee0297a5e1aa9c71808b8d1bd6c313c2c855760b7ac","first_seen":"2026-03-21T17:26:39.564114Z","last_seen":"2026-03-22T00:40:18.034532Z","times_seen":4,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/NotificationsButton-CmZ_pc7F.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/NotificationsButton-CmZ_pc7F.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:09 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-22e\"\r\nage: 2670\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=w1I01fIO2KLBBmcZGnOd3SAayx_p3EUCsjv1GwsX7qM-1774113940.002448-1.0.1.1-1q65lAVTspDLb2xCXp02_cxFrwtdgKjV4WM33t0dRieMynzeCTa3zpnqiIYWNCnEXKhUQN8CbM9wK4i0nYjgdrq83_QWT6QA7ux0Ac01EH6S9E.39vyGLFhWzUiZt_iN; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CnTCvzrenWNrOsEjt5ZJmvu6kYYDK1h9y3jiiBRBjN5l6EtNsmiM0HzRDeXHDaWzWhHs56sgvv5KVkJsh7r4Vwy%2BAiBHAXqmoqkH4YRsdVrs5Pw%3D\"}]}\r\ncf-ray: 9dfea838ea529cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":558,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"051a83a76a17decaf79265acca3f4d57","sha1":"d7f6e37bd318580a705e97bafe6423fe59fedac6","sha256":"186e8d40128d0573379363a0f0541a546388b54f525b6da47c408f57ad8e6e95","sha512":"6b0ddf6b7e7971ef86cdc5fb4c880491532c8a50a561a398cd175d41daf7e7f72004b6a1d78fbd661d7c5c863a75f3b3f8e5e49614ea62b6436468192bb44d08","ssdeep":"","tlshash":"95f0204beaa8d4b41bc39e70633b8426383a7c2cee4a948000a62c55177015ac54fe8f","first_seen":"2026-03-21T17:26:39.459535Z","last_seen":"2026-03-22T00:40:17.889441Z","times_seen":4,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/InformativeWidget-DPp1w1VJ.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/InformativeWidget-DPp1w1VJ.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:18 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-43f\"\r\nage: 2661\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=OV.9mhX1MLiX4m1UCGhkECu.AzwA_ipaHxyF6ozzekY-1774113940.3951497-1.0.1.1-qCtWVrxpV7v9Qg4qFiHQsIwcYBYlTNO.zeSb8XHiZYlA9n6KYGUbCqbhEDK7DTjwudk2kWG3un0c32Jf2DVN0BKScjnI8aOo9.abAq3IaGhrw8ynpk.PHcJCVIWU2XZ3; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyIBZIPv6IGg4PBXVhyY7Jo51i%2FbS9UFIvCEooO3L%2FAXhlY8QXzChhKK4sW1lXx98u90dhvb%2FAcxDBJprJzYxN2c3vyiQyz5vVNBVyvFaPF4CMU%3D\"}]}\r\ncf-ray: 9dfea83abad79cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1087,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1086)","md5":"0ac4a8b46bc7ec9221ede066013b02dd","sha1":"0e4dff7ab9f997e52c674c55d33eac8bab2a4c93","sha256":"2aa3b96dba14088b2890089781fbced38f7874ade1a0797b3d7aa6992b8e5827","sha512":"323c5f306e6c5ea9d47a2243d3cb77f379e0cf43ffb3ae53ce46493a3df5d01a1266a4b023ada516e1b93b4405f86c94e4fbfda17ebe5f7ef1c0222f6c53167b","ssdeep":"","tlshash":"c2114646f594d57db0394dc44257809169312de4df7dd4ed98617408983010776dbbec","first_seen":"2026-03-21T17:26:39.371175Z","last_seen":"2026-03-22T00:40:18.075938Z","times_seen":4,"resource_available":true,"data":null}},"time_used":880,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":880,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/HorizontalSportsList-DFiYn3iS.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/HorizontalSportsList-DFiYn3iS.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1a6\"\r\nage: 2657\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=MijGE1DeIEw_s29tL7qbgNpBhl0x3J.eH4pEhBz6OyI-1774113940.121398-1.0.1.1-zLUU92PeYc7ubVZNsDPm.QamZYDez8X9nOIEgIgpHiJqJe5oUcvDV.mZ_woSYRPy3lHnvDF3P4iFHyK2ggcIyVFjva3GzYg46nDj70ahyEk_xe7iUNVl4.4jU._L4Jmc; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIzYkAOsMqkT4EIstS2zhxBGiq3TZIk0HiwalAW9AcxW69txf1S4IPYITmpwmIIQNdAaCSTWqBCXduwGXe3aCbUYHWVDBEb6zxBYsiemw%2F%2BNSaM%3D\"}]}\r\ncf-ray: 9dfea83b0af89cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (421)","md5":"9e97ea9cb856db5aea93097b24ee839a","sha1":"3216ec0dd353cfd8cedc5dcb9bd06e0e6c04dd2f","sha256":"f0d7ceae5b03c9848b3e7891ff4b73462b8aaba69044516382b1a93b9369f97d","sha512":"14d66003f13803ceec3064b27084a362f95a796ae8724feaaa0596aeac0f16141f26adf5660e396af9ea9fff16e3d322c005a133c116c489f80f414be0fc1850","ssdeep":"","tlshash":"06e02b81d8618ef55a2a88efaa5c24846122087cff47a6b1d29492182b7508bf72a40d","first_seen":"2026-03-21T17:26:39.547601Z","last_seen":"2026-03-22T00:40:17.818577Z","times_seen":4,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_c2798e3c84b9cdb7f38468addd0d2cf3.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_c2798e3c84b9cdb7f38468addd0d2cf3.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41468\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 30 Sep 2025 10:15:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68dbadc7-a1fc\"\r\nexpires: Sat, 28 Mar 2026 14:35:57 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 10183\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=iWlmTwiya8Ig3w2aPTCS9xg07HGYxs27IsmDkIrbc7o-1774113940.672062-1.0.1.1-.YJ3bOCigLQxZC1myAG00cIbDzannGfSksup_VhNytv1CnM.ClZHUa1zHEGSa9zLm0FOM1j09M.D.29oCgxEPi2ozyUqElr0.kGGhGQhaLhnI4AiZxYy3qWmPNcNATKT; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OWF8eGxkAJJ94W%2Bsfu11Jng1dRju2jZmBlPMiZX%2B6rc9leXVrqALG9E40XVb4uJTAFY7lO1m4JW%2BDPdiBuBp88oD0AdE6KwmjwgAXGaneQUEDl06Bg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83f8be29cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":41468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"73cc0bbb436e26b9b598c9e48ec14826","sha1":"9fa3cc5ab9ac1a70c8c28e384ce695bd2904fada","sha256":"fa1c9533908deb22f89990a240a1c0ac2aa61a5a33e8faffc1dc0475e33c639e","sha512":"195f91ab33d65511b31e95308c95b79a5c097f78a0bbe4a99e081a5704085fe8fcc601ae0d0adcb0a439b0a9bc326f597d62e31c26eb359a610f474a41aaf2f8","ssdeep":"768:EeFn2FhdX/7CJjYdDHjp/VvUlF9791MUC2Fon7y+sHuwQn2iCP2TqbyTu:i/ajqTv8lF95+fTou7CEWF","tlshash":"5013011dde495ba80772339c878fee86d0924aaede24852b18ff112997047ec43af594","first_seen":"2026-02-24T14:23:51.089025Z","last_seen":"2026-04-21T21:26:35.820427Z","times_seen":32,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2176\r\ncf-ray: 9dfea843bcadb28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfepCHWB1qkSi-cNd1o8wsvD9BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=16+2 c=0+1 v=2025.8.5 l=2176 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b91b6e5024dfdf6e8a4d61f0f74dd13","sha1":"1614f764ed7b516c7768fae0966abab152ac7d1b","sha256":"00e34844a07301274fc65fdbb65891aa95436b94c4c860d9edfcb96331c5487f","sha512":"c3948fdb40f0f4154fce632acb88cf9cf57ce39d2858e4934d8820c4d5729da238c569448b5bcb6d1780e37f005cb9f5ed60093005cfa451a92270c4c0034566","ssdeep":"","tlshash":"48413ab2c3378c72ce2cb5e3e9b2d5168b449a5a91859afc22413d33a4b145cc4b89e4","first_seen":"2025-01-28T05:59:32.007883Z","last_seen":"2026-04-21T23:36:13.370354Z","times_seen":2744,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:34.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"d9deabdd1848c34f3ab46722f446c153\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea8189f340731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-04-15T01:21:42.632515Z","times_seen":11130,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/tr.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:36.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/tr.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:37 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b1c2a4d2b221a5c3df91a782a9958602\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9dfea8292f091a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12522,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"d5c878b97a6e060ddcc4f14fac2c8f68","sha1":"8f1cfd2be7067d0f230c6a8e4e85f700611ac5d3","sha256":"205a43ac3282e1533a6f03102f07c4b6fdb957b777e85135585af927547dda82","sha512":"9f49e1e332fbfc76add070a561f936093d3c54d0c9e0de4bd92407fd31a6716053b5177d586f8300394c15f21d9d7b68c9f4a25abccb5190ec3255eb87be6ab1","ssdeep":"192:OyJZiyVI8zVt8yr174zUet94dgbIfCTLOSWhmiUSI8MRcM:Bil4r8yB0ZgcTLHcmiLMRL","tlshash":"49429519cd61dd5b0196a34bf4db1643b0a942871f20382dbb4c86bd1f8e9af60fa74d","first_seen":"2025-06-19T03:00:53.745119Z","last_seen":"2026-04-21T21:26:35.542314Z","times_seen":512,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":435,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/GoogleAnalyticsTracking-DzsiAHbD.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-DzsiAHbD.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:14 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-3588\"\r\nage: 2665\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=HXqAAG8zQW.5PzNpLtCMdV3QzrnlPAFTn3vAVip70b8-1774113940.174399-1.0.1.1-bf3R0Hv9TTWulbkY3qCOAV9zfkeJoZV.Hp9vDD4t1nE74TgNCBipo0ZcEw7v4ErMOg_vHxW2ltX7dtlIAqm53eSIFRP8GPys.KWIpo7G1glDMotpHC8Yy5.jNDXNR4.H; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0Mnw6CNfNHCxIL7gzc9s%2BXA9WbuE7oJ19%2BbD%2BQDLBPDh6z%2Blk%2Bsac28lO%2BXjxbc2yyj%2BuD19nYgEvp69Kl05lnK5w%2Fj3ZiKv53zuZ8yxhHYUZ0%3D\"}]}\r\ncf-ray: 9dfea838fa5a9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13704,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10208)","md5":"5c30b07b6e6d96a02961fa121d936f2c","sha1":"b9a4142d99821eb90ab286e8accdd5d8cca5497c","sha256":"3b654664159054341a4e796d088aaa15d5b0ae7a460e47c74748a3768db23406","sha512":"f10646c49bb35a7ce60f4021e5671e9bf71ca8e2b1865132dbe0b0c70794ed01afe084d178b81be5435d1efc99ed275c78aa0afaaa2a94d4b5eac54c79d694ed","ssdeep":"192:sWYceR0SE+m/CTb3bHXCT76h1QxGE0VK7D6L7kBNrnPsh52Lz2PM7mBE:1YcoE/CzCuEP3Bky2PdBE","tlshash":"7852b55c32adb0b682df6054587f720bf1755910a458f480a265edf46ef8caf02abf36","first_seen":"2026-03-21T17:26:39.415393Z","last_seen":"2026-03-22T00:40:17.807909Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1007,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":926,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/fonts/default/RobotoBold.woff2?v=159","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=159 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index.B9WK4fdv.css\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\netag: \"69bbf7a7-f250\"\r\nexpires: Sat, 21 Mar 2026 17:41:04 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\naccept-ranges: bytes\r\nage: 2675\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=0ZHwnywuo_oMZ69XzCXsK1Es.41z_.5TeQET_yLIoQ8-1774113939.7325542-1.0.1.1-ISutniIxc_DAknvWxg0hNSzEejsMg_mOVwOaIT3mF6TDI3o8GrOK2oAqcq09lRyPyGY_ckQtL5aOWQVgjnogjV80r46WDkS5.i1U5Rdj7ai1FyaMxyRjCkaVqnRnOuEt; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jx6CSp7BUPwZnadKmN9HuMdydscFJA%2BJJ48LEIQEH1m1XtSV1mlkkyadkQSOFPAyvXo%2BDz0LHcJG%2BzKr1Edhy3tAmAHZnrtdlyU8hb01MJFDm8o%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8392a6a9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-04-19T13:12:16.87074Z","times_seen":2567,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/UnavailableMarketEvent-CEcm-hzZ.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/UnavailableMarketEvent-CEcm-hzZ.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-134\"\r\nage: 2656\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=olppHl6SS6BPF3VXT2hWX9wAudkkXncfjlvXNId4GDc-1774113940.9041498-1.0.1.1-_d9nLVOulwsoqTHNUs4htA71JKp0Sq.foznsNujcVAYyLCgZoK2dM2rH7AwzY6qmis0X_6lDhufkHddH69d7hz9R92WN5lKaPGPIIKu8PzgymS559yfhWfBVy5wcuBd5; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1uy9a0tWvuJpzsboF896NNTCOIKXTOlhOF6GfwTFTg2VBnA1355Og8JDE34liBy2oQofpAVZ4IXaLk%2FB1z8u%2BrqC5wBJHhkWXToU1%2BdK%2B0pb24%3D\"}]}\r\ncf-ray: 9dfea8415c499cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (307)","md5":"0b0ac8ff4ea1cdf1c6e3218d90af5f8f","sha1":"560311f83f0e70f7915a340a709fe175752e98a3","sha256":"7ae2345a86ab8a00f2b0a3019769022692d90986cb2a311f42aacf61a63cf460","sha512":"3d2d8cf095d4b2a186b587501f0908a86da704cfbce63b6f5943da761aa4661d7c352d57164d1ea49fbbf8a17c0668bc008b062f0fbf409e30b41ed85dedbd78","ssdeep":"","tlshash":"bce07d09b004bbfac02518ccce3e4f0d541207a5c7e945d391a910181b34261350ebaa","first_seen":"2026-03-21T17:26:39.660084Z","last_seen":"2026-03-22T00:40:17.841734Z","times_seen":4,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2444\r\ncf-ray: 9dfea8439c14b28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEskOIKWizVhJrvVnrMlrV9p-fmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=19+0 c=6+17 v=2023.9.8 l=2444\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b44902a539b26f42ca501a8fc2eca9a","sha1":"c9156f826c8af47c13c4e95a4953987d2c34a74f","sha256":"e1473cf463a4e737486548692bef2ff33e1435ccb7b1d4d9e4428371b57a2666","sha512":"2dd9d9716c420f8d993a738149c8ed8a18bb8ee2034cadb05c3743cbab9ecb9eaabfa064be34e53fad571e80eeebdf7292cb9811a369dd67d51da327fd80fef2","ssdeep":"","tlshash":"db513db78f5778c0ec5c0e4b60017a48e401be0053f0e18caab51dd2069c629d371a8b","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-04-21T21:26:35.800426Z","times_seen":1575,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/494.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/494.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1388\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Apr 2016 09:13:34 GMT\r\netag: \"a36181174092d11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 19 Apr 2026 18:44:01 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 81699\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=fITEeQ9N98ECKRFqhjdQXSbxX7yFGptpPHcmGBHR0b8-1774113941.6120746-1.0.1.1-vQcdcAcFmjZul9OlEvg1NCwvGGZgsk.ZkcndHrvcexklB.qdxJXpZkiwUvUycpfKTKkfSD4DRmukNqt4T3PG.m0W6CtMTxn3luedRF3Z_2jGnYojILOtgB1P9M5v5O9I; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2KM0IFX8O%2BQXQUPRAanCSIcPESwSFlb7ErfoT0AAvf%2FvmFh3nOjhr6fuMOwqwK77E7kVwdsI65cB2Q7ppOtMdDxg4bXbYSsMqKdBhUBNCh%2FY%2FZqmb%2FvEWKuUNS4%3D\"}]}\r\ncf-ray: 9dfea847087e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"55d1f45c2066a00e1376436fa8962d1a","sha1":"145d4415d252571366fafaa544bd9feaeb2cdeec","sha256":"4e71167929caa49b9d19205a27b4e8e420fbf5bc9010c1aa984856f744941708","sha512":"3bbb9c3fabec07000d444d82baddb4b92cec81c5048836c22814795936e874a6b3bb5bd8a9216bbff29d0fa30f5448f4b8cd635e698a2e914712e9283ad289e0","ssdeep":"","tlshash":"45210be49746ca189e4a0e7d66487151defb652f24d8f544e170b09316197d82181ec3","first_seen":"2023-11-25T15:41:35Z","last_seen":"2026-04-11T14:11:32.540852Z","times_seen":290,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/translations/tur.json?v=1774113900000","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:35.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /translations/tur.json?v=1774113900000 HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: SERVERID=s2; TawkConnectionTime=1774113935578; twk_idm_key=VuseDNgSfFBpmz9BOPkOg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:36 GMT\r\ncontent-type: application/json\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:31 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 18:25:35 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7a7-30ccf\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=8Jf8i_ca53zYLvds5Sh1Ata7MG0ooRyFytYWw20JGV0-1774113935.9130487-1.0.1.1-5T_hzp5lTBKHfwiWflMrz2xr7E9ZNZJkVmNSOIbOmf8BsD8VlubdyX_bMJnZHuJKOMNRso4dkMB0bFIzj4tfmymnPMNfVjhVel_mhOwvjGrydzcRBZWDqBi5pA1eNdJi; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I6ejmppg9BqSklUBAH6khnDWrRMlpMhmq3XE%2BNwoDnNC13TNU40kHOyM%2B54lm1LQ%2FCktcsY2ifat0ytQqd2MM1Sg0FOVXpWggUTzLORkhL7NHGg%3D\"}]}\r\ncf-ray: 9dfea8224eab9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199887,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (63253), with no line terminators","md5":"d7143f942398609571955fe899788b69","sha1":"1ca53771c0daff81931970625d5cc5bfaeadd438","sha256":"440ae71971f39fcc7002dbc943ea1a34eb0b441825f20c3747607ada4a2f2d09","sha512":"2ac68b685b698b903e553235f5fd961f030c9d5caba13f8c53c4d532065e65a50f36716a3d666db49f22b6973a72b8f3ec4fce62620219c078fee01cce780800","ssdeep":"6144:vu+a3k6PQoW83TX+oTo2MD4wOcOwqHECKqdpVyKjscdG:G+Ak6I0DM4wObw4ECvdppG","tlshash":"d5144c05586e3cfd97a207ce74de9e66b0fa0283d150e416ed9dd63a138c767d22b90c","first_seen":"2026-03-21T17:26:39.722774Z","last_seen":"2026-03-22T00:40:17.868102Z","times_seen":4,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":510,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/LiveChatAdviser-D27OhzDI.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/LiveChatAdviser-D27OhzDI.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:10 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-35e\"\r\nage: 2669\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=M8CgWcaYWhsM667OWkIImZfbLT76_ViOC.7LgVlLt6s-1774113939.5913424-1.0.1.1-Z7SMZXn.Z.0EekM2hgaLNn.odQ2qCgGkCOnsmuyknWl2At4UvH_PqHqpQ25GuyO3N2s8luSeimJksS5gPySEF9khlRHhT2RJ95ZTR4ne1RBhBB4I_gn4e5s2ACW2TZc8; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWT6WZrYMeEUG0vw5kcJsnhjGVGhIBYb7QwIJQSe2x9FenMBc4TKH5qdXhjcLewtlDy3HAHCpcU4HkX2dGo99X2VQe8IQarEWMH7c9ScOmYqA3I%3D\"}]}\r\ncf-ray: 9dfea838aa309cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (861)","md5":"3f2f2d7d30934cdc6d0c21e68d266516","sha1":"e2f9d76a03d3b6486f98e28063874aed70597f6e","sha256":"c0679235f12e7fd2c68602e19e347b02bfef3b2294537a021c919947c34ad810","sha512":"ccfbb78a037b16838f08bf177af40478c903b90d8625a5ce72007afc3b19f6afd999668179c42580a4c0116dc034fe2b3ff63a69f1c48a6bba666596391e3836","ssdeep":"","tlshash":"4e115295f0c2e3fd6667284dd7ae2043700a4fb5d22d4db6807b19601a2ce09e30eed8","first_seen":"2026-03-21T17:26:39.544297Z","last_seen":"2026-03-22T00:40:17.804736Z","times_seen":4,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/userJWE-DjlZLNdN.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/userJWE-DjlZLNdN.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:14 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-c1\"\r\nage: 2665\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=D52StScjT_6IZQMmRMBFznC86VfwmXICpyH1SiLq94I-1774113939.667124-1.0.1.1-AGCv9JFQA6fIL1pa6ctQuBegjTFDvD0zzFSPahVD58b6TwsOhCOCahZfHj1o1BPlx6LYLABOa3nkAIlD7yXPqTfK8WcsJcEBmJXoH1ldRbCy8M73Uu0b9daXsH0t_St3; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4lYUlEt8GHeI5VXgpdAx7%2Bk4wjlHTE9BGryndXr7mb1JphVaxIOIW%2BvaIPLrHvB%2Fy%2FgI9QL9Stzy0JqD08RidlKRfkSV3e8twiTRfgTA1hllfs%3D\"}]}\r\ncf-ray: 9dfea838da449cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"508c7f0a90ffbb5b03c98a9a7dc24c36","sha1":"b9e31f5961c5466efe981d1e76f0d812c251d678","sha256":"8deb2e3f97ba996e49168980142a357c49d4641bb9e2278358c5630cc64cfb8a","sha512":"a6bac2efcf8d93fc449c37c3606834bd751181d3ce3381429e8c5f955c263a4d0f582e8a0e13a584fbe412848395e8ae1f730a2255ab5162e4c53c81163a5aa5","ssdeep":"","tlshash":"d5c0c0db0cd411f7c5583c501007dc138230391473d8d3525b08c3ea7e5104bf10ca14","first_seen":"2026-03-21T17:26:39.726618Z","last_seen":"2026-03-22T00:40:17.996301Z","times_seen":4,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/Odometer-DagrzJgf.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/Odometer-DagrzJgf.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:19 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-3d08\"\r\nage: 2660\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=H1Gnpp2FrrqTIxsmSwIRCBwajqQ3IXA6gabfHau1b0E-1774113940.0941763-1.0.1.1-qAPTv.D5Sr0eGr8o16H0dJ1bx.ljsfs8yRzMoQ5v_Y8vXavXM8khbRQuVQ7LIl0d_IKeZHf.UNpOOr1mE5TqZfvvEAjrjWaw62tRyRqlUyl3MP2E713KNbM3KceciQN5; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fn5VunCmXT42uDIzqLi2fSs510b7STawZqIBe%2F%2Bu8V3%2FKf%2B4V%2FDvGKTc%2BiSo3EK3e0UNZdEbdA2U6bMlZ8gj8oRoRg0vUPej83Kr8tR4t1nb4P0%3D\"}]}\r\ncf-ray: 9dfea83afaea9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":15624,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15623)","md5":"8a74ad83f4d1efb621438d7021c4628a","sha1":"120a50a42082236b3e09009ec567650ef3fd9347","sha256":"dc82bb79f276cb80002d3acf0030ab12ab8708a6c49ccd3a6efa43f016a699e9","sha512":"6b1f7dc97e1051af90eb7b72e4c5858e98aa819f42e7fa46c45cd42eafa7f088d6bd156a5880dbbe207de909d54a5dc2090721f104153898bb4029ae8c05525c","ssdeep":"192:J9d7KNJtQak5S0CGvDF2pXokmkvm6HjI7kauLPH7BNeSYpkYxSBrC7TlFa4PBD:sVQak59CGbM1mem6HjLPyFtUhkNPt","tlshash":"43621a897922723443a3b1e055bf4609773e5d6a3808405db67caedabe32c09d12bff5","first_seen":"2026-03-21T17:26:39.710671Z","last_seen":"2026-03-22T00:40:17.816907Z","times_seen":4,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/usePriceChange-DGCuPhY8.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/usePriceChange-DGCuPhY8.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1d6\"\r\nage: 2656\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=I74I1_dLTmGZX9SrKVyxECQFID8RDnDxQ2zsTa_SwFg-1774113940.1010768-1.0.1.1-FMP.rE.2wWWZQw.z06.Xl1cm2vu4nh8SQpQatXJvHk.ynLDcq7kwc21BULDQN.CbHPlV_jOQz09qjdu3178U2yy6yhMyVOFFdWsPpoABMIWwnbr6BAlmHmDUFh20zhBJ; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MafVphJUqJJn3MM1AYkC3mYsZI5uZ%2BfDGfVGkGjIoOJvFhas0anRrI1GbHdfA9xHkeCnGcgfYu9o8lGfbc1SDaWiFnaHdibo9wKs7KSnk0Z5SyE%3D\"}]}\r\ncf-ray: 9dfea83b0afc9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":470,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (469)","md5":"985c9befee4d6eba2e166d88af88e692","sha1":"613a85f6f6f82454339d05b495353d2a2d82b9b0","sha256":"4eebab780e6e5cacf96c52faf820d5e0e49b9d80b7aac3bcf1dfaeecd2c342e6","sha512":"87b7284f4b4786f6d426342c1285b6e7fc8b539c311551cb72f12da1169e5954b28d2644e22e4f62e7e05740663a80852ce88b3ef1fe8a8895b86f19d66a6c74","ssdeep":"","tlshash":"e2f05cbd24901823545f0cc4c26585571fd126d56bbdc31eb230cc2d37589af066ee6a","first_seen":"2026-03-21T17:26:39.72857Z","last_seen":"2026-03-22T00:40:18.012304Z","times_seen":4,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/SmartMarketEvent-BbcnqqZJ.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/SmartMarketEvent-BbcnqqZJ.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:24 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-393\"\r\nage: 2655\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=1gHOyC_h1yOmMfhuRiNHK3__JY3UNhai3J_6Tcn9Pn0-1774113940.0371644-1.0.1.1-L1ovi77puoyImaG22bPwQ1nHK0EALY2C2NzCjJhIX6ip1IqwK6mSuLd297ymlGyAyQJDCzC.22bgZrYauKSkd9H7Pin7Z8Ovs__1d9Kf_CRU8n_EQFIMkH58f7D6FeGb; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ez8A7vDOd9mxmu12ha3SHri%2FMxoJbAVcQ%2Fy9W6fn7jJPER%2BcygNBK15KS1ZZtkQ9%2FvXyD6yIFPP%2BAnStMKSZHgsCW3S8JJCySCuRIaits9noagw%3D\"}]}\r\ncf-ray: 9dfea83b0afd9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":915,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (914)","md5":"f2e243077781c5b4c30585af2daf3bd1","sha1":"7de46f25b06f1b64016b2f8ef354ecec2ca889c0","sha256":"88032c64572d2bf0740a517c16a6490fa0e009974f8fd42bbf8882e5a4937932","sha512":"4f46dfc7adc759e6df653732f6f6f1d2ad05d75229122d62478d3840ce62813a7f9c11d5c16b23ad193f158972e0638bc3f97e587dcfb8b1e595636313672fdd","ssdeep":"","tlshash":"1911cc96e480723a0672c8bdd1109f42416812d7db20026ae58b8af173ae0fea24ee5d","first_seen":"2026-03-21T17:26:39.407622Z","last_seen":"2026-03-22T00:40:18.157676Z","times_seen":4,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/Mobile.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/Mobile.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=1ZU4vY8SwFGhFyJx4eMYq3Tg4t8MCEzJDem4Tc3M7w4-1774113939.98725-1.0.1.1-40lg1Y8FMMe4sYMGZTEDAQRdE36UqFLdoRsR_OGHyzP2R5q1UPrOFfzOOP5m2ct.ZdPq2WA2llI7rEIZiCTiZLP.4FnAe_skLuWrHFdjfkIjfY2cwDG1nOUajpELs5dk; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uxk9tSL7s3lUwWJ0OtMYpD5EM%2Bp6gCNysDTLBUs8EErVaPvRri9is9jkppKAKiW1D51EkIiqbX2lH9bL9J5m2nWUA8Z3r3QKN%2BKCSVqmdV8bwF%2F4Qw%3D%3D\"}]}\r\netag: W/\"68627114-155\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea83b8e0011c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":341,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b140aef15c3a0e2328970dbf675bda24","sha1":"77f0fce91e82379b75340bef8bcf39509d1c55eb","sha256":"08c2a0b66d7c329ce1e9e957188e98e920311984544c6d824a29cb8c73d668c0","sha512":"06c19a313efcafa154900f41bd864dc6bc5764a82dfaee82c91ec6fb360d61e0da1a1bb8fa6c58dd8a14f6cde01b85fe25e0ab56a9ba3009f4be67f99eb1ddd5","ssdeep":"","tlshash":"dde078e5b250d40ab5557d53b3fcd5a35e69f0d1da940c39713e791e0fa3034128d14d","first_seen":"2025-10-24T05:32:28.297874Z","last_seen":"2026-04-21T21:26:35.737553Z","times_seen":38,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/if-defined-CWaLTnLW.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-BnlPX2hH.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:02 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-cff9\"\r\nage: 2678\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=B.Jr90xGCOy7gCTHqLFc9kUPZhhGZTj9A8dUmxdEynk-1774113940.1872003-1.0.1.1-06adlLaFdVz3I8Xwki4hlVLe6mzcsWdKTSYkKrxc7ZBbXyiRgVOphbF9ah5DAqCn.5TX4BGV4iqvunjEpAS_Oz8J9sStUUfg2s6Ii9YZDkJbsbiuddNkEbXfCrKthtwf; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4rMpUFvjgRcrT7h8hr%2FqXRixZq%2B8oYnEN%2FjjJWI2mKne7j9KqnslRHexof4bzuADrGLHbLBE%2Fkt%2FNCzqRD1Zjufwq1OoP0k4qL3uXLM6uhtzSy8%3D\"}]}\r\ncf-ray: 9dfea83c6b3a9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-04-21T21:26:35.697782Z","times_seen":581,"resource_available":true,"data":null}},"time_used":566,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":427,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/JackpotPoolsWidgetContainer.C5xbwG7T.css","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer.C5xbwG7T.css HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/tr/\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=MXUaarBueq6_UKKRwbhU94wNf4c3zW19R1eXZTcagJc-1774113939.9445531-1.0.1.1-n2cf1xhWGVNLf_dvm_O6bM27EBhNaGPc8qS.iouU8BUeXfp07KiBO7_jFg9ENQezdqlNSMQfq19aCRAnH6hyfyNresMQwr6ONbk09Kf8Ibgy5D1NVUk2AsiJ_4mGPSLz; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nexpires: Sat, 21 Mar 2026 17:41:06 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2GOlLgoWbIhrN1T7SqmFyEqd0TR05Cx%2BGSBK0B1p0ns%2BJ32rSUtvubQL%2BWV62Vj16ww88qrv0GXgRn%2FjpyV5pV7cwkCUBXyLZFy3KLscG3EEWO4%3D\"}]}\r\nage: 2673\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69bbf7aa-1e9f\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea83adadc9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7839,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7838)","md5":"e5810a6dc4d39ef75c921489cfd463c7","sha1":"5fc7f46d4da76fb2a42c52007391d21797d606c1","sha256":"152eaf9db05e66e0b7e8ad6961a68ed2bacc25204acec7a0cc81547e002b278e","sha512":"07eb19ac6e96b910645b4e77b14840bc99ed3c4be03c78a7d8af8449906dff08791eb2701c710245c329b38281b118d422921cb1a3272c97fa5ea1d1de06bcbb","ssdeep":"96:Xnxo6ZIBmmohvoDxTTFQPHf9bzsV/bV/YgV/FxV/QV/OV/tV/IV/EVSVqV0VOVB2:XnX1Xx3erZg+L8Pyw","tlshash":"bbf1651352ab33ac6eee6937a170e31c7b7c083dc7131559adaf124a4e9aef1061971c","first_seen":"2026-03-17T07:58:07.338795Z","last_seen":"2026-04-21T21:26:35.739733Z","times_seen":28,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/TvGames2.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/TvGames2.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Jul 2025 10:31:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=O7hRYnfsXir87E.6H1rcBungl9gkyutaCuyk_teogvs-1774113939.6731236-1.0.1.1-eVb8lJmgHhOUesoXrcU3JY6l73CbXI1ejfFerd7P0HTZfiZ42D.GC1A.RyNUvIAliwWT4is8xWofRemsGEb4ajDtKcSDLrx3b3wxnCkiuIMhnIrxgrrtdm.UjnfyscIk; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7e8Nw%2BOa%2B%2F2es62HzLnDv3qfXVFZVcX9aUZQ31grkScpc5M4RA3xD4OucNSrIYy875cxdBe4L2RNhYI%2B8D76lrp0H8GiqBouOC7%2B1zOq8ezn1N0mUQ%3D%3D\"}]}\r\netag: W/\"68665beb-8dc\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea838d88f11c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60d24e57914ca41e702277a9ce44e813","sha1":"bfb08c8dce26d91b1fdaa008ffdea07bc100e0c7","sha256":"144a8bd1616f38a95bc6e7f59283e462f358a2dcf79e10cd7bd256d49e6e4134","sha512":"43503c3df559cc8b5fab3dcd299f5dbfc8d5a6f9dbd458781c53a409d859ed730ffc24420d462b914b4ef96f1d63d9bb508ef733bad33edadc5a2d12b22e4eb5","ssdeep":"","tlshash":"7f4165f9efb091f46dd94fa9ef324cec750e68fd9f220a84812c861c66a3d94d644410","first_seen":"2025-10-09T13:22:28.980997Z","last_seen":"2026-04-21T21:26:35.76447Z","times_seen":49,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/PromotedProductsWidget-Cu6mpMj2.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-Cu6mpMj2.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:21 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-84d\"\r\nage: 2658\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=cmJfc8xQrChFIwPWcp4eoUWMf9OQOP75fVbQmkbtBnw-1774113940.359635-1.0.1.1-wV3X2XxTZyH_G2NTwrscSqLgdUEjwywIiYNHZpsDkAFasL4g432528elpRyfmsqaN_wyGRnfWKEYkPh7Zo02hPGHNN5ZtqknfvhsDvgNNqgfZ9l2QWbrcPZvCBzifqv5; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RsViECXEgodSgNR5jptta%2BIO2W6xfuGurinW2ryt0OLXBjgZtBjnqZI6Q%2FcBztPc6Q1F13U9WSydXKZNC3l1gc5QX2v8TUAYnHq8bgzqqK7o2ZU%3D\"}]}\r\ncf-ray: 9dfea83b1b019cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (2124)","md5":"7c3153e4aa4ebdfb11edb1ceb74721d7","sha1":"63a1c4e73b113fc5a7cf75360a42fa5e1d09007b","sha256":"0efd8b0b27b02dfddaef49296858ac0af81408ba031a3ecc38d2362f5b57f851","sha512":"31680001416098b2b40a7dd8905262064badc782cc6f7c7fc22afb10da2e29273384113d1b522894f476cf38f68e66ada739b7e8b3d94ad2fe13cb74e2086723","ssdeep":"","tlshash":"5a4175c2d838b2baf63e5cec214510c838267d18d96589b56077bc1a9139812bb57ffc","first_seen":"2026-03-21T17:26:39.657319Z","last_seen":"2026-03-22T00:40:17.80938Z","times_seen":4,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/public/proxy2.js","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.winwingames.io/","date":"2026-03-21T17:25:39.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /public/proxy2.js HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 21 Mar 2026 17:25:39 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8LwJB1wV6UKj0aSuAVmtQg3oMBoNZTXtk0HR1YmNzWc95TTsKcOiNa0NIrOemUOHS0nRXmQtYESEbG6JB4YMfkzoQLLve%2BImnMXwq1lxe2pditu6f4s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dfea83b6ae976a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19498,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1296781ea2c9cd24e19fe155b42373f2","sha1":"d7ce9dffbb2482bc2f3795cdeaa727d99e49644d","sha256":"de74ac92be5c23abac0e045e3380edf98b53abeb1abc7351e98ec06a71a01359","sha512":"3922435bb5f624625705a335938c57a7addd890b26905e7097bbed9882d0508fd10eacfd3fa32cf5b570deece89987d97773fc9377c68416dc03707c32e4af72","ssdeep":"192:0e/p461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:l//Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"ce92860e927b6123447334bc978ba146be1150971d0acd847f4ce394bf85b6eb6b27ac","first_seen":"2025-12-24T22:39:16.372563Z","last_seen":"2026-04-21T21:26:35.732746Z","times_seen":32,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":151,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/VideoBingo.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/VideoBingo.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:12:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=K70JHXOD5s6.mxJeYY9HPxJ9nCGMpFWzaPPFxLYCJPs-1774113940.1546192-1.0.1.1-XcN2xc26muEine55yOVVrhZxhg2deSpOluUIEMSo.7Rv987Fb44EckaN1LKZFDGmelmGHhwk4yuOUd7KqQP3misxqumIHAZHTaVWqNg5eh6QKpEh3zLEzTUbxAIJP_qv; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvcH2gLbapXxta1bIf%2BHH00IpX562Sb7Z39ocIdD%2BbbXVfYgU1xvyDs3ZJa1pJgANl5k%2Bh5Cu6KaSARm%2BfKBpvd5yykyH0e4aLlnbhhvdBuFG3vrRQ%3D%3D\"}]}\r\netag: W/\"68627129-7c7\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea83b7dde11c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cbae8aa582bac1aa011b5159e475a38f","sha1":"0d140fc00b303fd23250218e03c28ccf986a39c7","sha256":"dcd44096973914fc9f8fdeb79a3dc5379403c3d1411854e634ab7fe444578271","sha512":"05e2c75c337a1fad9f895fa0b1635725d1681e774084ed34084444508df8dc8501c01644b19ab4f9a948c1e5b6621fd67df4fec41eaaeaf187d1a9e90c58244b","ssdeep":"","tlshash":"e24133d5e7b0a6ac2ccca59d6f2148d7350ae0bf6db36a5ce22edc580b53e1c0611c99","first_seen":"2025-09-19T18:19:26.310809Z","last_seen":"2026-04-21T21:26:35.627448Z","times_seen":50,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/jackpot-jNbP6Duk.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/jackpot-jNbP6Duk.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/JackpotPoolsWidgetContainer-CnlG40EL.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:18 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-178\"\r\nage: 2662\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=E5DcsMh4jg8TYXeqbJGN71lVklIxpU3oX6IXCApUHow-1774113940.8278112-1.0.1.1-kIMHSG9ohzTfFbCsoRpbnnwJQrt3IPSLccuYr.RIP.3b2iYkKI6Vs5C5aTtWuSwdeVNORxEQHMzzBCJEB4NKU6.JNw3pxRUjWMWvVpWdojNtdQHaUXK51BOAwUW7ATKH; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ExCxeV%2BaOEswLsW12%2BUfVB6PRO5U7dCRCjoYAtT2o0DaUzc2n65pgmFJrgKhTxx5sXjoaULg3h2pg4YVwM2K9RlUWl6oA%2BrilUy%2BuAPVoELhbr0%3D\"}]}\r\ncf-ray: 9dfea840cc169cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (375)","md5":"c4e89512f1192d8bdeb452c2cce992bc","sha1":"1d30070e7d0ed0838dbae22c81c41430fb3d0d45","sha256":"4a7f2a8747580d38cb522b361b5cc73a8ebcdb6690f3f8d92d7dded5be8a36fd","sha512":"b548c62816c00d3df156b43a8e608d5d7de55931f121ecfda4e7296e5cd65208ffaf60871ba3b035cd43b5e2aae82b0965329a8c9b5a0821de5a23fbdbc12626","ssdeep":"","tlshash":"00e068eed8c08dfb967007552bb018840e2416ca101ec9e4be2672611800b8828f8239","first_seen":"2026-02-24T14:23:51.255604Z","last_seen":"2026-04-21T21:26:35.58754Z","times_seen":43,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=492809","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /wc/rewards-main.umd.cjs?v=492809 HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Mar 2026 07:57:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: b8yeTtvajr3_ju.8a313lC_ASV0iVU7x\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SLov%2FRNx40LNnv5os8rAxTbrhG3hvNqAEgK06zVtTtRPFhZDAl1%2FBF%2FjkIR3xwBixOxQwOz%2Fzzasi8rGfaEopxAtQ8K0oRp2zgPmAQ91LQTstcsKHeHcdEBXIi9diw%3D%3D\"}]}\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 05844663035089f465172d861220e698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: MKNLVZMRKXbH3moor-MmlnN91-jgxRi91dGSUjC_82r0mLNQx7OYvg==\r\nage: 64\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"a90bd08562c2b9ffa19b9fd0c10a8790\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea8439cf845dd-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":994390,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35569)","md5":"a90bd08562c2b9ffa19b9fd0c10a8790","sha1":"4417a4b58c1bc7a7ae0609d53ff30d14d99f586d","sha256":"a1193fdc8d0ee22d154c5fa8476594c51162fef2bd7ef36f50b6a9639055e481","sha512":"e1f04b124317829cc29540ff65b30f690410765717d284c6a648b045839501c084ed4addb13b3fed885002456185297a31d0148976f553a9398c056c213f4a68","ssdeep":"24576:PlkKatcX3lkC8MLdI+hRInTp9Km1rHOm+QToL2nlkxaCnTzbF6P37Bh:PlHatcX3l/8MLdI+hRInd9Km1rjToL2h","tlshash":"bc257d9072567534c3b795a260be050c723c5b03740ac5a8f2bc99a92fd7c9a627bf7c","first_seen":"2026-03-18T12:31:46.587385Z","last_seen":"2026-03-23T12:48:40.312382Z","times_seen":7,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":32,"dns":0,"connect":1,"send":0,"wait":56,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1688\r\ncf-ray: 9dfea843ac59b28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=690+4 c=0+4 v=2024.10.6 l=1688 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffc4df749e3b8f1d0890df22f4bc77","sha1":"ec3033a449dcff239808409c5d96d388a661ea37","sha256":"c7cc404018e711a83cdb04a08a5c5a12f54d1612b3d3cef12a0b7721fccd4465","sha512":"0ef53d6b15c58647ec9f81e562dbda560cd9f6287abf9d07b5e791db37b97879aa57c86637f7213ff127d4d10e4b8528ffc5368e085d8179d18524a4d506a649","ssdeep":"","tlshash":"cb311a52b99510c943825527eff4cd41971398270f3c61734161247349694b22df02d4","first_seen":"2025-01-28T05:59:32.01912Z","last_seen":"2026-04-21T21:26:35.729801Z","times_seen":1580,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","date":"2026-03-21T17:25:38.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 19:26:18 GMT\r\nexpires: Thu, 18 Mar 2027 19:26:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 251960\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-22T00:08:00.648594Z","times_seen":753672,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":33,"dns":0,"connect":8,"send":0,"wait":8,"receive":9,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/BetslipButton-CNMBkbkj.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/BetslipButton-CNMBkbkj.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:10 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1a2\"\r\nage: 2668\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=SYSltKEapaj.sGsHlqAwbXtDSoj2hBcv8hmaygGRp8I-1774113939.619487-1.0.1.1-19v3UXuZBJRGU7ILCPMAK_V2wQnwciDjCDMGkZRIKHXK7oMBUs03SCSEZZnjUW9BGh5_J3XN1E1.FV5w1SBv2fKLljbCJ.cz.SLwpCUUDnwY8U.30nV0571X1dn2fgG8; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D81ygZlsGsxaUXSxKkCoFXHWfNqt9nZsbzO55xclshZWW16IfCstRtLrkTuDSyMotSF0VX9%2F1KelA3im1iZtIkUUuLgjZFv7TwxmSOz8PdEZ2Xc%3D\"}]}\r\ncf-ray: 9dfea838ba329cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":418,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (417)","md5":"249176655ccc714dff62a32ca7344125","sha1":"b2405b4b60d6bc4ac573b2f02a73ccf50fb95d6f","sha256":"55fbe0abfc99ec5c3486183b6cccac4ee249dce7d36664b5fc8cee69ecef62ea","sha512":"29545a89b954d8bd838e455af8c8ff502c6cdcee4283698ee957784188664cb775b081edf08664d5fe201a8db623035e744a105952a58a07402ea03407da783a","ssdeep":"","tlshash":"40e0f1468948c2fe07465dc121078502343269bcb340e5d280a92c527fb4689c45fa6f","first_seen":"2026-03-21T17:26:39.706598Z","last_seen":"2026-03-22T00:40:17.78654Z","times_seen":4,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/Firebase-diKvNL2_.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/Firebase-diKvNL2_.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/index-D3fSQXEs.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:35 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:08 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7ab-1487f\"\r\nage: 2672\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=OqHcYs4O_fvZE871aRgGpwwFoNaYNI1UWaEpzS231EQ-1774113940.178253-1.0.1.1-EN63FfOtsdVu1zmdXxhYgG19FKe1Ue.jvyW756m6iumkC451exMS4h9TtzwbvfmxQ5kKYw5gsgz2ApjL8QIyZOI_ZRemFO7eCUp1Td8.lGqgPHdYrmdUmloqmZjyTUe9; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOXI%2Fy4MJ4%2FcEnXShBVZbp53sLF456IPaR34PpvUXWQC2Y3bsL8TtHvG5DU8aMWg9Pn2sDhhjZePIup3x%2BtGCPupToMe3fqmJBpt7gcz8nDr%2FRc%3D\"}]}\r\ncf-ray: 9dfea838ea519cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4779)","md5":"a9c96b15207b33ce41c266eb191479bf","sha1":"f3a296de9fe8c5443c223461091bdc8a52c0b6c7","sha256":"a541d121f4449536a19127ae7c01559eba206cc71f0498a5a1038437a937ace1","sha512":"2ace56c3aaa190691316c2d9469f3a2b785d4b8de5cd20f39fd17e9da4275c2b33f4fd7fae089cc692004d9066d45af1f0e3aa0e3e4affe9a7c3314522077e35","ssdeep":"1536:s4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:ss1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"8e83957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","first_seen":"2026-03-21T17:26:39.602259Z","last_seen":"2026-03-22T00:40:17.843659Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1017,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/HorizontalNavigationListItem-C9W5wxFK.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/HorizontalNavigationListItem-C9W5wxFK.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galebet1065.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:22 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-2d8\"\r\nage: 2657\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=fDOappV.SNGNDFRgGzW4dpRwhU3LNwwh.jp6ghGUUCQ-1774113940.0369408-1.0.1.1-1gOCDxnbWN_NO3_d_le75CiNSTTFCejwrq8AfxeWZkC.VMfUn8D1Bz3wqIQueCu_EP56YyLrYE8Wk2HPqmCxkeyoXCjB5wjDUJhdCD0BUn_dKtMuzXSGYQgqIJgAvw_S; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ofL4C3668sqFkriOAs7DxRz0Ull2OvGtQiR4S4ywE6fS0kuMtyOai2A3A0wlztrbnSRV9Qgit5ZT76mjtoV0OWafhLbQml4zYipD7S9PeptiUug%3D\"}]}\r\ncf-ray: 9dfea83b0af99cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (727)","md5":"ac06b8982ccf6ca471baa48a0c19c40f","sha1":"2beae61a21fd2d59f9f03a8795d2efb19aa6baa2","sha256":"9e4e946f9caf7daf8a634127530fc8588afa0ed9668f7c6bea709315c09f99d2","sha512":"5f0361d32bc8cc698b97e0c47b49f3de892c438447041a8eed5c71097b6e390f96a6759981c40b8f446f53ccd31c4af978881cd7a86261306a6034d18552fe67","ssdeep":"","tlshash":"a701c001e014db7c9a2b55c86b9e1089b1579afeef382cf1a0f4e11209344593646e8e","first_seen":"2026-03-21T17:26:39.54095Z","last_seen":"2026-03-22T00:40:18.030844Z","times_seen":4,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/svg/GamesOfTheWeek.json","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"172.67.157.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:39.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /svg/GamesOfTheWeek.json HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:09:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=nIv.wo0cgVzLimv0O8ybNXEP8e8mzT_Qv0ThQxLNjAg-1774113940.1076567-1.0.1.1-C.vjrRqEVNjQHkUvDoYLKpxvZVHrxyQuwRxW51atES3plHuzvdOEHNJRxCp1Zw.epXkNtv7g0Xv3wb4Eap16dBwhpJCSd3zqgIPnSZiLrI31cqZj0CATRSAb4pSL.f41; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7u02b9tCwz%2B32Ip56TqrX2t%2Be9OF9btxLB0jTTdfAxM58RJpb4UOcRUxQY72AECwIVj7RNpCYKjwhoQ0zQxUu3PC7f%2FiX34kDPFhd8iVWdUfM23Mzw%3D%3D\"}]}\r\netag: W/\"68627086-be0\"\r\ncontent-encoding: br\r\ncf-ray: 9dfea83b8e0d11c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bd48bcac13b7af9a43338fa39450069c","sha1":"b39e0dce82eec16651566913e7d8a1ae26ee25d8","sha256":"e67476d135f1d3e566d62c017b8a4afa7b3013dc29540a85de3c9f071a11812a","sha512":"39c26cb74b8bea9fd071edc07b5fe1ef144747ebd23593b409aeb8f0e6894daf00a946805f222e2dca66dae48baa4adab0196a4ef71720fd109aeba8f11e1026","ssdeep":"","tlshash":"6951b0d8c5254afa1bcc335e6322542b0cc92fd6f7a35cd8b27c85985b13d062a7e883","first_seen":"2026-02-24T14:23:51.265611Z","last_seen":"2026-04-21T21:26:35.572591Z","times_seen":34,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/userJWE-DjlZLNdN.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/userJWE-DjlZLNdN.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/FastTrackTracking-Dwszikk4.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:14 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-c1\"\r\nage: 2666\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=mD4nITJIAqFG9rOOXWg0f4nz1iC26nC47Sjxdz8gvf0-1774113940.440992-1.0.1.1-hf9dlBVowaHhpYPlXwYg7X.Pt3i4MdIs76voK5GHLKu1cw85dloZYSMGi8hkyrhVxNWqapkY7vFy32V7x_jTut6f0aPpRYY2tmSCXZ7Dq3fWOfAG3ZWEsPglt..9_jJL; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C40iiR3pRcudFeywA5c0Vby7u%2F7%2Fw554vkfaWFdmrIbSEVBc5UMsNcEGJNX90DcX0rAnbXGlVXbZHpM2YhZW6jNgOXgGmNT%2BvqWEs0lug6fqhzE%3D\"}]}\r\ncf-ray: 9dfea83e7baf9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"508c7f0a90ffbb5b03c98a9a7dc24c36","sha1":"b9e31f5961c5466efe981d1e76f0d812c251d678","sha256":"8deb2e3f97ba996e49168980142a357c49d4641bb9e2278358c5630cc64cfb8a","sha512":"a6bac2efcf8d93fc449c37c3606834bd751181d3ce3381429e8c5f955c263a4d0f582e8a0e13a584fbe412848395e8ae1f730a2255ab5162e4c53c81163a5aa5","ssdeep":"","tlshash":"d5c0c0db0cd411f7c5583c501007dc138230391473d8d3525b08c3ea7e5104bf10ca14","first_seen":"2026-03-21T17:26:39.726618Z","last_seen":"2026-03-22T00:40:17.996301Z","times_seen":4,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_e17e2bd68c4902720215ccdc250ea7cf.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_e17e2bd68c4902720215ccdc250ea7cf.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30858\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 14:02:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694014e5-788a\"\r\nexpires: Sat, 28 Mar 2026 14:43:42 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 9719\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=aewKysfDpDPmzubFWkw5iwIsAauh.Z2TPbSgrnJQj38-1774113941.6049268-1.0.1.1-aSqBFx_8slNoAoLFn5IqHGum0MW9bfY85wyYiz.d6jvhSAl9owm3643SJWv.VLzH4KrLSHuSdnd1heGwdQ9WGVNZElnYKcXigxlcUxicJ_JTiZn9sKWZehLZYbl5Hywh; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vv6gDINx%2Bjb81ErFglGeUlCghdgsay1ILuXGaxJgommQQLVzbnFfSNHmo4eiMUowr95or3kL4fgLMrZYHfrjb%2FR4PyVvs6ktHKh8oFK%2FioWhXM8lA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8450d3c9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":30858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3a657bf250f0501b6684593c6d3449f","sha1":"3ae10ca24e1ed4fd7f3ee97a04029f84edb29c60","sha256":"4df91740f4d1d34398bcde4b0e71127587fe51241c3283f3e7a3bcffefdfc21e","sha512":"c70376beec80f90f2b6f42daa10038112bca9eb928f50f6dfbbb4b8e9054ecfde0afd7aba72fa826bd64ab0615dae03db9d608d7f63e06af394bcd5b669a2ec5","ssdeep":"768:X2NTeq/6/zzgNTdJxlOo7U+QcbTMcipzeGy3sB1I0:4Kq/6/0O0UOOzeKBS0","tlshash":"22d2e1a0782165c72e6e25483195487b904f5bec73687de5b9ac03b3ed0e2f24f69339","first_seen":"2025-12-24T22:39:16.142316Z","last_seen":"2026-04-21T21:26:35.786126Z","times_seen":40,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galebet1065.com/storage/medias/galabet10/content_751_9d7a3472a72a545588ee02e8633f0a2c.webp","fqdn":"icons.galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_9d7a3472a72a545588ee02e8633f0a2c.webp HTTP/1.1\r\nHost: icons.galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nCookie: twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24730\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 14:02:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694014ef-609a\"\r\nexpires: Sat, 28 Mar 2026 14:43:42 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 9719\r\ncf-cache-status: BYPASS\r\nset-cookie: __cf_bm=P4cAL6Mm8nzRmMhsRnDBE5PFhMolTdQOHwOmZELVM.s-1774113941.4885535-1.0.1.1-wDL3pwRX8QyjKGX3ZVRMVWgG.duKKnULulqQyMNlUr_qMiR4.dQlK3M5OMx1wzZJwVcFDJnGGcq8JQ.iELX8tEjYzyK9ANGKxH2nNPp.i3dPjc2slRxxm12Z19B.tcHa; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XCB1sKUdQe9d%2FqnTtiweXtZ%2BYA0kwTUvd%2BM3UGdSNW55FfW7kJFAE%2Bdenp6%2BwosLz%2BUYjsywZEYbbwuNUldYcajgWy6N5a%2BP%2FuUnM3SsDJzfue0%2B5w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: 9dfea8450d3f9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":24730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a684d3e1bc93c1bd3a25d9983b83c43","sha1":"716d0144a9feb5a701d5eb48133f155c97a47946","sha256":"8b8e3b62b691c235c3aa5aa0ca6bd0eaea4a188271006aa9b8fdff49c9a06f94","sha512":"b66cfd7a78af400a5375c747bd08f6d230798eca3fb7fb7e623a10694901475ffacc21eb5c6edadbecb1234bb751d2c62f06eadc0192731abcb5422d13d18980","ssdeep":"384:pFhktnLa9HrvO+y3t9oDMTjRsENmQFyUzDm8kNRfxv/xvr5c8JPH+UlX:etLaZ/sPj3NmQ7ToRfx3lr5c8JPH+WX","tlshash":"f1b2f1045efc293755f843d01dfcee680e5441af12980c20814e77f9faa9a3ba81ea5a","first_seen":"2025-12-24T22:39:16.21561Z","last_seen":"2026-04-21T21:26:35.659182Z","times_seen":40,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"icons.galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"icons.galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/67a3e7473a842732607a39b8/1ijc3usee","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:33.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /67a3e7473a842732607a39b8/1ijc3usee HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://galebet1065.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:33 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69967ba6a3b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9dfea811fb180731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"afe540b62e2273e43af099d554ca3edf","sha1":"6f266f8f1606f7e3e3d7d39bd7e4a7595d17643e","sha256":"798061d11a3ba2146ba75fb0f62b67d86377de87418e5b08bc98eedbce34ee90","sha512":"9d80f3226fedc9c7565c3e9f0c999e7c14f5c58376115429702f433cf8639f2df490e4f5520f4cfa3914ea1f06c893f51f86a23507a00a54e7c0ed8868e05c44","ssdeep":"","tlshash":"5b41eeea5b4f1c56b22410d90dbef90ef47720f749da5892d70c085272657ad2f8de38","first_seen":"2026-03-21T17:26:39.738715Z","last_seen":"2026-03-21T23:21:16.914293Z","times_seen":2,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":53,"dns":35,"connect":1,"send":0,"wait":494,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9nYWxlYmV0MTA2NS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=a50ml71y2cmz","date":"2026-03-21T17:25:38.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Mar 2026 20:26:41 GMT\r\nexpires: Thu, 26 Mar 2026 20:26:41 GMT\r\ncache-control: public, max-age=604800\r\nage: 161937\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-04-22T00:06:26.986466Z","times_seen":565796,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galebet1065.com/assets/usePriceChange-DGCuPhY8.js","fqdn":"galebet1065.com","domain":"galebet1065.com","tld":"com"},"ip":{"addr":"104.21.34.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:40.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galebet1065.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 13:48:35 GMT","end":"Fri, 19 Jun 2026 13:48:34 GMT"},"fingerprint":{"sha1":"3D:48:1F:ED:A0:16:02:3D:70:4D:1D:47:04:52:BE:F1:6B:13:A2:AB","sha256":"03:70:18:10:BB:4C:F1:33:38:A5:5E:61:9A:82:D0:E5:D6:5B:A7:3E:15:1C:3A:09:7F:4D:D4:97:55:8A:DA:77"}}},"request":{"raw":"GET /assets/usePriceChange-DGCuPhY8.js HTTP/1.1\r\nHost: galebet1065.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/assets/FeaturedGames-DmW74qti.js\r\nCookie: SERVERID=s2; TawkConnectionTime=0; twk_idm_key=VuseDNgSfFBpmz9BOPkOg; _immortal|user-hash=lMBt3qqltHZM5p-51EhTNLB6IZGPswEkN1sG; twk_uuid_67a3e7473a842732607a39b8=%7B%22uuid%22%3A%221.Ws5FN4wMbkAKg37nk9q87YR3nfdvqIiISWngMdjc4l3xpWxtImmddWYNHuPtGWPS7uxb2vI5m8hYBDBFNw0CkJr9fPdxqipAMoynNjPQRbhkBy3IWJFX7TML7%22%2C%22version%22%3A3%2C%22domain%22%3A%22galebet1065.com%22%2C%22ts%22%3A1774113936820%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 13:18:34 GMT\r\ncontent-encoding: br\r\nexpires: Sat, 21 Mar 2026 17:41:23 GMT\r\ncache-control: max-age=14400\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' https://*.galabet1060.com\r\nx-domain-activation: 1\r\netag: W/\"69bbf7aa-1d6\"\r\nage: 2657\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=cQmsJ7kjIM1uwkRrJ9CEoB62N4LkHL.0pV0.u40wgck-1774113940.9398434-1.0.1.1-l8yAQneJppgP8qeV9L2YJUQIZttI9622VRW800cOHNCE.kF92YLABfSOFt_gxFdm7mRt5YyNsf5Zu6ZJuTAei0hX907XabM1zNld7excNyMXOH_.2HheUZVGw4KV5qjz; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Sat, 21 Mar 2026 17:55:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ygCK6ulTd8ODq9Sg%2BzarBsL5R3XfytsqXa%2BaSPSclmibB2dwNvMo1YfkqeDkCsbJ8J92kyiG6qS1GRXB6zQ13gaX0VKpiCu1Z4vbrzY9RtfVGEo%3D\"}]}\r\ncf-ray: 9dfea8415c489cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":470,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (469)","md5":"985c9befee4d6eba2e166d88af88e692","sha1":"613a85f6f6f82454339d05b495353d2a2d82b9b0","sha256":"4eebab780e6e5cacf96c52faf820d5e0e49b9d80b7aac3bcf1dfaeecd2c342e6","sha512":"87b7284f4b4786f6d426342c1285b6e7fc8b539c311551cb72f12da1169e5954b28d2644e22e4f62e7e05740663a80852ce88b3ef1fe8a8895b86f19d66a6c74","ssdeep":"","tlshash":"e2f05cbd24901823545f0cc4c26585571fd126d56bbdc31eb230cc2d37589af066ee6a","first_seen":"2026-03-21T17:26:39.72857Z","last_seen":"2026-03-22T00:40:18.012304Z","times_seen":4,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"galebet1065.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"galebet1065.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/1051.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.473Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/e/s/0/1051.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T00:09:27.040561Z","times_seen":14037425,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/1051.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/1051.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1366\r\nserver: cloudflare\r\nlast-modified: Thu, 31 May 2018 14:08:33 GMT\r\netag: \"5f254fdce8f8d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Sun, 19 Apr 2026 09:58:04 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 113257\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=eZGP.izGJpeAZVJ3q1AAwY7n3nOzbpFxqt8Ewh0zpno-1774113941.618392-1.0.1.1-RwExXYrfnkgF5zHW6XpxbcC4PUHtgYmvsqZy_jFXngbnYH4B7qehesAPvvTxJ.JI8iEQRLR9AdMHm1ZdWPC5g7tKGVy6eJOtHnxLRkcniK1yAK5t48KFJBj5NC.yZu6V; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D1IR%2Ftxuxxyk2AuIL9ZxtVhmTy6ZzV%2FPEBG2fBJFYfUD0K%2FGoNcnKpzcRZvEzc4VDVLGR5DsIX11swnD%2FkuPdP3lU9pGOnmoRu7DB6WacP3M3EYItpdJt3dk%2B4g%3D\"}]}\r\ncf-ray: 9dfea84718c95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c9a48a7e307680b5ced8ed3d7c449ad5","sha1":"3b6b70b67a64a5712d3f468be6acfc52134facb6","sha256":"cedf663a00de7e382bc4253600cc0c83b769ed5dc6b241754cdb92f5aa86b347","sha512":"135b6b35430b3ed3c94130e832cd848c0223c7ff2387ebec481fd1257e2b50d0cb83fa09187e65c5471353f5d027465e217d805b356f5c6b9d662701648274f7","ssdeep":"","tlshash":"f22108f6984c6ae8e18a0fc72bd7f060ac1b21e9615539242335d95ce6640dace74bf4","first_seen":"2024-12-02T03:48:18.564758Z","last_seen":"2026-04-13T17:44:31.710973Z","times_seen":32,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":20,"dns":3,"connect":8,"send":0,"wait":20,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/882.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galebet1065.com/","date":"2026-03-21T17:25:41.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/882.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galebet1065.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1785\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Aug 2021 08:31:07 GMT\r\netag: \"3fc3d010c28dd71:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 13:50:10 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 12931\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=nDMgfoOyioJ4sO1wyRe43XAea7pYmIQKO0wEPIm9vYU-1774113941.6058831-1.0.1.1-XaFV2ClTDXFZV0N4knyvXBlqE3ubtWKahG1A.qAQZLuC5YZ_Q3kK.4BX1xRTj2xnFq4YaAtg_xb90coFRiRxiVuK52jpgAM1avXbwbxKNtmqjpFUBINS9JXl1uBeLNLi; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Sat, 21 Mar 2026 17:55:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6rGrzRJaYyuc1b%2BOZnJXdGYaMuX%2BCTriHUufj5suIgNk%2Bm3N8e3ZoAvELFutqOCgymG6b0hVgqqCjV9moRL%2B1ZWRiOU0NAbNCebc9h7DMMykGxXcYxvkBcTOkwc%3D\"}]}\r\ncf-ray: 9dfea847083b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8b5f6433dea7312827d44a3ee44d3f13","sha1":"c1332107cdb0a3cf3ee63937f8cfdb06d67b57d9","sha256":"ec4aa3b2a968531cd3902f37aeff8ff229be8d5e064ba4d22383575f4ab2b387","sha512":"de62dddfc9e31da1d704eb6a31ecbfdbf2a186efb6552255b65ac6835ba6f4f00438391264264166de022c8f03a93c2341df0e5656d80a5212b07223e86df7bf","ssdeep":"","tlshash":"d3312b11a2ac457d9c8c0130b0fe7c07a40e85b37d3ad51caa3ec2a2cbb885ac5c1f46","first_seen":"2023-11-25T15:41:35Z","last_seen":"2026-04-11T14:11:32.423384Z","times_seen":218,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}